|
Klassieke bestandstypen zijn vanaf januari 2021 niet meer beschikbaar voor gebruik. U kunt uw klassieke bestanden omzetten of een PDF downloaden. Meer informatie

Export Workiva audit and application logs to Splunk

Beantwoord
Demo aanvragen

I'm trying to export Workiva audit and application logs out of the workiva environment into my organizational to collect or be ingested by my Splunk so we are able to monitor workiva from a splunk dashboard or run various queries 

From my organization I will be using a HTTP Event Collector (HEC)  with token 
Using this HEC I should be able to send data and application events to my organizations Splunk and use the toke for authentication

From the Workiva environment I believe I would be able to use chains to gather the audit and application logs and then use connectors to connect to my organizations Splunk using the token that was generated when I setup the HEC 

Not sure how to set up or configre the chain and or connector 



 

0

Opmerkingen

1 opmerking

Datum Stemmen
  • Jeff Hickey

    Hi Michael Williams,

    The Chains side of this build would start with the Workiva Connector which has the ability to List Users which is equivalent to the "People View" export that Organization Admins can generate.

    If you need additional information beyond the list of organization users, you can get more detailed reporting using the Admin Activities API and the Prototype Admin API. You can interact with these APIs in Chains by using the HTTP Request Connector. See HTTP Connector Examples if needed to learn how to use the Connector in your Chains. When using the HTTP Request Connector, the first step is to Retrieve a Token with a POST request. The API Details section of any of the API documentation pages walk you through this setup step. After generating an access token, you can use it to make subsequent Admin and Prototype Admin API calls to retrieve data from Workiva. For more general information, see Get Started with Workiva's APIs.

    After retrieve data from Workiva, you may be able to continue to use the HTTP Request Connector in Chains to interact with APIs external to Workiva. This could include Splunk, but you will need to verify Splunk's integration capabilities for compatibility.

    Thanks,
    Jeff

    0

U moet u aanmelden om een opmerking te plaatsen.