Logging Administrative Changes

Follow

Dexter Blakely

• August 26, 2021 16:59

I'm trying to look through events that I have coming into Splunk and I'm not seeing any administrative changes that I can filter on to view when any of our Fastly admins change configurations. How can I do this best? Is there another log stream that needs enabled to view administrative changes?

 

Thank you!

0

• 

  Elizabeth Ortiz

  • August 26, 2021 17:48
  • Edited

  Hi Dexter,

  You can log administrative changes by using our API endpoint "https://api.fastly.com/events". This endpoint retrieves the event log for your account. You can read more about it in our documentation here: https://developer.fastly.com/reference/api/account/events/ 

  and here:

  https://docs.fastly.com/en/guides/monitoring-account-activity-with-the-audit-log#accessing-the-audit-log-via-the-api

   

  Kind regards,

  Elizabeth

  0

  Comment actions Permalink

Please sign in to leave a comment.