diff --git a/docs/documentation/platform/audit-log-streams/audit-log-streams.mdx b/docs/documentation/platform/audit-log-streams/audit-log-streams.mdx index fab5f16b7..5a7092cf7 100644 --- a/docs/documentation/platform/audit-log-streams/audit-log-streams.mdx +++ b/docs/documentation/platform/audit-log-streams/audit-log-streams.mdx @@ -72,6 +72,44 @@ Infisical Audit Log Streaming enables you to transmit your organization's audit + + Stream Infisical audit logs to Cribl Stream for centralized processing and routing. Infisical supports Cribl as a provider for seamless integration. + + + + In Cribl Stream, navigate to **Data > Sources > HTTP** and click **Add Source**. + + ![crible add source](/images/platform/audit-log-streams/cribl-add-source.png) + + Configure the **Input ID**, **Port**, and **Cribl HTTP event API** path (e.g., `/infisical`). Then, generate an **Auth Token**. + + You can optionally configure TLS in the **TLS Settings** tab and add a pipeline in the **Pre-Processing** tab. + + + Ensure that you're using a port that's open on your instance. + + + ![crible general settings](/images/platform/audit-log-streams/cribl-general-settings.png) + + Once you've configured the Data Source, click **Save** and deploy your changes. + + + On Infisical, create a new audit log stream and select the **Cribl** provider option. + + Input the following credentials: + - **Cribl Stream URL**: Your HTTP source endpoint composed of `http://://_bulk` + - **Cribl Stream Token**: The authentication token from Step 1 + + + If you configured TLS for your Data Source, use the `https://` protocol. + + + ![cribl details](/images/platform/audit-log-streams/cribl-details.png) + + Once you're finished, click **Create Log Stream**. + + + You can stream to Datadog using the **Datadog** provider log stream. diff --git a/docs/images/platform/audit-log-streams/cribl-add-source.png b/docs/images/platform/audit-log-streams/cribl-add-source.png new file mode 100644 index 000000000..95546a456 Binary files /dev/null and b/docs/images/platform/audit-log-streams/cribl-add-source.png differ diff --git a/docs/images/platform/audit-log-streams/cribl-details.png b/docs/images/platform/audit-log-streams/cribl-details.png new file mode 100644 index 000000000..4aa3cfdf5 Binary files /dev/null and b/docs/images/platform/audit-log-streams/cribl-details.png differ diff --git a/docs/images/platform/audit-log-streams/cribl-general-settings.png b/docs/images/platform/audit-log-streams/cribl-general-settings.png new file mode 100644 index 000000000..8f3d20c0c Binary files /dev/null and b/docs/images/platform/audit-log-streams/cribl-general-settings.png differ