Skip to main content
Solved

Alerting on SOAR Audit Logs

  • September 17, 2024
  • 1 reply
  • 10 views

keso
Forum|alt.badge.img+7

Currently, the only way to check the SOAR audit logs is going directly to SOAR Settings->Advanced->Audit. In this console it is possible to see who did what, when, and where. How could I configure an alert so that when somebody deletes or modifies one of the playbooks, an alert is sent? maybe shipping the logs to Cloud Logging? Thank you!

 

 

Best answer by f3rz

Hi @keso, currently, the only possible way is utilizing API (same from Settings -> Advanced -> Audit). I recommend you reach out to Support to make a feature request. 

1 reply

f3rz
Staff
Forum|alt.badge.img+10
  • Staff
  • Answer
  • September 19, 2024

Hi @keso, currently, the only possible way is utilizing API (same from Settings -> Advanced -> Audit). I recommend you reach out to Support to make a feature request.