→ 🚀What's New? Join Us for the Fall Product Launch! Register Now !

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Charly
Engaged Sweeper

We would like to ingest Lansweeper internal audit logs (e.g. https://community.lansweeper.com/t5/reporting/track-lansweeper-classic-logins-and-setting-changes/ta...) in a SIEM. 
Which options do we have to retrieve the logs? 
a. Directly query the database for any new entries? 
b. Have the logs frequently written to disk somehow and monitor those log files (e.g. via Report -> CSV)?
c. Any other ways?

2 ACCEPTED SOLUTIONS
DavidPK
Lansweeper Tech Support
Lansweeper Tech Support

Hi Charly,

 

Currently it is not possible to connect s SIEM to the on-prem version on Lansweeper, however we do offer some Intergrations with some SIEMS in our Cloud offering.

https://community.lansweeper.com/t5/cloud/introduction-to-lansweeper-cloud/ta-p/64515

View solution in original post

Mister_Nobody
Honored Sweeper II

@Charly wrote:

a. Directly query the database for any new entries? 

Yes, you can!

View solution in original post

3 REPLIES 3
Mister_Nobody
Honored Sweeper II

@Charly wrote:

a. Directly query the database for any new entries? 

Yes, you can!

DavidPK
Lansweeper Tech Support
Lansweeper Tech Support

Hi Charly,

 

Currently it is not possible to connect s SIEM to the on-prem version on Lansweeper, however we do offer some Intergrations with some SIEMS in our Cloud offering.

https://community.lansweeper.com/t5/cloud/introduction-to-lansweeper-cloud/ta-p/64515

Charly
Engaged Sweeper

That's only providing Asset information / Lansweeper content logs, but not the internal audit logs. At least that's as far as I understand the API that is the backbone for these siem apps.