Skip to main content

I noticed that the admin/co-admins can create a webpage for audit logs, but we can't extract logs from web page to SIEM. We tend to get audit logs via APIs,  http://Box.com can provide APIs for business purpose, so we want to know which API is used to get these audit logs? Can your team point it out for us?


Thanks.

Hi Annie, 


I recommend using our Events endpoint - specifically with the stream_type of admin_logs... this should be all the events in your enterprise. 


Thanks, 


Alex, Box Developer Advocate 


Reply