AWRA OpsHub Search

Integrations

Streaming the audit log to your SIEM

Audit Trail Integrity

Answer Summary

Under Settings › Audit Log Streaming an administrator sends every new audit entry to Splunk HTTP Event Collector, Datadog Logs intake or a signed JSON endpoint over HTTPS, within about a minute and in order. Each event carries its hash-chain position and seals so the SIEM can detect a dropped or altered entry; failed deliveries are retried with backoff and nothing is skipped.

Support note

This public article is built from approved AWRA knowledge and is safe for buyer education, support triage, and bot grounding. For customer-specific data, billing, security questionnaires, or implementation commitments, contact the AWRA team so the response can be scoped to your organization.

Article Feedback

Was this article useful?

Help us improve this public knowledge article or route you to support if the answer needs human context.

Feedback is logged for article quality and support triage.

Explore the full help center

Browse all approved public help articles or search a new topic.

Back to Help Center