Child Item

Export Logs to External SIEM solution

BattleShip

We've a business account and we would want to export/ingest dropbox logs to our SIEM solution (Elasticsearch)

So, I would request any solution and any suggestions/options are appreciated

Find more posts tagged with

API

Account Settings

Export

Abuse

Under Consideration

Comments

Megan

Hi @BattleShip, thanks for posting today!

Do you wish to export members' data, or the content of your Dropbox account?

If you wish for your content to sync and export directly to your SIEM, keep in mind that there's no direct way that you can achieve this.

You could use an API, or a third-party account that would help with this.

Let me know.

BattleShip

Hi @Megan

Thanks for responding. I would like to export Audit events from our business dropbox account like File creation, deletion, File share status and so on asper security monitoring to our SIEM solution (Elasticsearch)

Can you please share me the suitable API/method in achieving this.

Greg-DB

@BattleShip If you'd like to write some code to programmatically export events from your Business team, you could use the /2/team_log/get_events[/continue] endpoints.

Those are links to the documentation for the HTTPS endpoints themselves, but we recommend using one of the official SDKs if possible. Those have corresponding native methods for the HTTPS endpoints.