|
Los tipos de archivo clásicos dejarán de estar disponibles a partir de enero de 2021. Puedes migrar tus archivos clásicos o descargar un PDF. Más información

Export Workiva audit and application logs to Splunk

Respondida
Solicitar demostración

I'm trying to export Workiva audit and application logs out of the workiva environment into my organizational to collect or be ingested by my Splunk so we are able to monitor workiva from a splunk dashboard or run various queries 

From my organization I will be using a HTTP Event Collector (HEC)  with token 
Using this HEC I should be able to send data and application events to my organizations Splunk and use the toke for authentication

From the Workiva environment I believe I would be able to use chains to gather the audit and application logs and then use connectors to connect to my organizations Splunk using the token that was generated when I setup the HEC 

Not sure how to set up or configre the chain and or connector 



 

0

Comentarios

1 comentario

Fecha Votos
  • Jeff Hickey

    Hi Michael Williams,

    The Chains side of this build would start with the Workiva Connector which has the ability to List Users which is equivalent to the "People View" export that Organization Admins can generate.

    If you need additional information beyond the list of organization users, you can get more detailed reporting using the Admin Activities API and the Prototype Admin API. You can interact with these APIs in Chains by using the HTTP Request Connector. See HTTP Connector Examples if needed to learn how to use the Connector in your Chains. When using the HTTP Request Connector, the first step is to Retrieve a Token with a POST request. The API Details section of any of the API documentation pages walk you through this setup step. After generating an access token, you can use it to make subsequent Admin and Prototype Admin API calls to retrieve data from Workiva. For more general information, see Get Started with Workiva's APIs.

    After retrieve data from Workiva, you may be able to continue to use the HTTP Request Connector in Chains to interact with APIs external to Workiva. This could include Splunk, but you will need to verify Splunk's integration capabilities for compatibility.

    Thanks,
    Jeff

    0

Iniciar sesión para dejar un comentario.