Prisma Cloud: The Successful Logins in the Audit Logs can't transfer to external integrations

Prisma Cloud: The Successful Logins in the Audit Logs can't transfer to external integrations

1952
Created On 09/13/23 02:57 AM - Last Modified 08/23/24 15:31 PM


Symptom


Audit logs are set up to forward to external integrations.
  • View Audit Logs here
We can receive some audit logs, however, the Successful Logins can't transfer to our external integrations (AWS SQS, Webhook).

Environment


  • Prisma Cloud Enterprise Edition
  • External Integration
  • Audit Logs

Cause


  • Prisma Cloud does not forward successful logins in the audit logs to external integrations to minimize noise and log flooding. 
  • All other types of audit logs can be forwarded to any supported external integration.

Resolution


  • This is as per design and is expected behavior.
  • View the login attempts in the console audit logs directly under Settings > Audit Logs.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000g2CRCAY&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail