R12.1 Project Publication-2025Dec23
Set up Audit Log Streaming
Audit Log Streaming allows NetBrain to send audit logs in real-time to a 3rd-party system such as Splunk for audit purposes or log analysis.
|
Note: This feature is supported starting from patch 12.1.0.5. Ensure your system is upgraded to use it. |
The following two types of logs can be streamed:
- Audit logs for user operations, which record all UI operations.
- Audit logs for device access, which record operations executed on devices in the Front server and/or using Smart CLI, including logins, logouts, executed commands, etc.
The supported streaming methods include:
- Webhook
- Syslog protocol:
- Syslog TCP (RFC 5424). Send the Syslog message over TCP using the RFC 5424 format.
- Syslog UDP(RFC 5424). Send the Syslog message over UDP using the RFC 5424 format.
- Syslog TCP with TLS (RFC 5424). Send the Syslog message over TCP with TLS encryption using the RFC 5424 format.
To set up audit log streaming, you can refer to Audit Log Streaming Setup for detailed instructions.
See also: