From 31f2282e23f70904add716c4fcbc83ded6789b7b Mon Sep 17 00:00:00 2001 From: Dan Nelson Date: Tue, 12 Dec 2023 12:46:25 -0600 Subject: [PATCH 1/2] Add audit log troubleshooting note --- .../streaming-the-audit-log-for-your-enterprise.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise.md b/content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise.md index e611eace62da..f6a3d124e882 100644 --- a/content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise.md +++ b/content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise.md @@ -275,6 +275,13 @@ To get a list of IP address ranges that {% data variables.product.prodname_dotco {% ifversion pause-audit-log-stream %} +{% note %} + +**Note**: {% data variables.product.prodname_dotcom %} validates the HEC endpoint via `:port/services/collector`. If self-hosting the HEC endpoint (e.g. with [Splunk HEC Receiver +](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/splunkhecreceiver) via OpenTelemetry), ensure this is reachable. + +{% endnote %} + ## Pausing audit log streaming Pausing the stream allows you to perform maintenance on the receiving application without losing audit data. Audit logs are stored for up to seven days on {% data variables.location.product_location %} and are then exported when you unpause the stream. From fcd62e474a44ed356d758fc253fa66ae6684817e Mon Sep 17 00:00:00 2001 From: thabit638 Date: Fri, 12 Jan 2024 14:46:11 +0000 Subject: [PATCH 2/2] Initial commit