Stream audit events to Splunk, Datadog, Sentinel or Elastic

Send every audit event to your security tools as it happens.

Steps

1. 1

   Open Admin console › Company & billing › Integrations & API keys › Audit streaming.

2. 2

   Choose Splunk HEC, Datadog, Microsoft Sentinel, Elastic or a signed webhook, and enter the endpoint details.

3. 3

   Send a test event, then turn streaming on.

4. 4

   Alerts can also go to Slack or Microsoft Teams channels.