topic Re: Extract Event log to splunk (automation) in Qlik Automate

Extract Event log to splunk (automation)

random_user_3869 — Fri, 15 Nov 2024 21:02:46 GMT

Hello everyone,

As part of an audit from my company, it security is asking me how to extract event log (every type of log) to splunk.

The logs i want to extract is the following:

com.qlik/edge-auth
com.qlik/users
com.qlik/automations

Is it possible to do that with an automation ?

I know that there is one available but it lacks informations.

Thank you

Regards

Re: Extract Event log to splunk (automation)

AfeefaTk — Wed, 22 May 2024 06:07:26 GMT

Hi @random_user_3869

You can use the 'Raw API List Request' block from the Qlik Cloud Services connector to make API calls to the audit endpoint and then log it into Splunk.

https://qlik.dev/apis/rest/audits/

Please refer to the existing template and make necessary changes for eg: replace 'List Audit Trails Incrementally' endpoint with the 'Raw API List Request' block from the Qlik Cloud Services connector.

Hope this helps!!

Thanks