Extract Event log to splunk (automation)

[random_user_3869]

Hello everyone,

As part of an audit from my company, it security is asking me how to extract event log (every type of log) to splunk.

The logs i want to extract is the following:

• com.qlik/edge-auth
• com.qlik/users
• com.qlik/automations

Is it possible to do that with an automation ?

I know that there is one available but it lacks informations.

Thank you

Regards

[AfeefaTk]

Hi @random_user_3869 

You can use the 'Raw API List Request' block from the Qlik Cloud Services connector to make API calls to the audit endpoint and then log it into Splunk.

https://qlik.dev/apis/rest/audits/

Please refer to the existing template and make necessary changes for eg: replace  'List Audit Trails Incrementally' endpoint with the 'Raw API List Request' block from the Qlik Cloud Services connector.

Hope this helps!!

Thanks