topic How do I consume Enterprise Manager audit logs directly in Management & Governance

How do I consume Enterprise Manager audit logs directly

Ewan — Wed, 29 Jan 2025 16:38:32 GMT

Hi there

We use a SIEM and we need to ingest the AEM auditlog files. How do we convert them from the default compressed format?

Thank you

Ewan

Re: How do I consume Enterprise Manager audit logs directly

rohitk1609 — Thu, 07 Apr 2022 17:00:56 GMT

Qlik Save logs in text file and qvds. try text files first, if doesn't work, load the qvd in app and save it in csv or xlx format which is suitable for SIEM.

Re: How do I consume Enterprise Manager audit logs directly

Ewan — Fri, 08 Apr 2022 09:07:29 GMT

Hi there - thank you for the suggestoin.

This is the Qlik Replicate suite - not the dashboards. So I don't think this is qvd format, and it's not raw text. I could go into the GUI every day and export the logs to text manually. But that is not a sustainable solution. I was hoping there was some way of ingesting the files directly.

Re: How do I consume Enterprise Manager audit logs directly

Albert_Candelario — Tue, 12 Apr 2022 19:51:35 GMT

Hello @Ewan ,

Thanks for posting, but I am afraid you might have not posted on the right forum.

Would you be so kind to post the question on- Qlik Enterprise Manager Discussions | Qlik Community

Thanks in advance.

Cheers,

Albert

Re: How do I consume Enterprise Manager audit logs directly

Ewan — Wed, 13 Apr 2022 09:34:03 GMT

Thank you. I didn't see that the Security and Governance tag redirected me to Qlik Sense.

Qlik Support answered the question for me anyway. There is no way to directly process the audit files. You would need to use the API.

Regards, Ewan