Is it possible to set up alerts via email for admin activities such as a change in group membership or permission scheme?
We using Rapid 7 as a SIEM tool so perhaps there's a way of sending the logs to that? Tried googling a few suggestions but 99.9% of the results are always to do with how to configure alerts for projects and issues.
Thanks
Dear @Martin ,
if Rapid 7 can talk 'REST', you can pull this information form the audit log endpoint. Then alerting is a piece of cake.
So long
Thomas
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.