Forum Discussion

BattleShip's avatar
BattleShip
Explorer | Level 3
4 years ago

Export Logs to External SIEM solution

We've a business account and we would want to export/ingest dropbox logs to our SIEM solution (Elasticsearch)

So, I would request any solution and any suggestions/options are appreciated 

  • Megan's avatar
    Megan
    Icon for Dropbox Staff rankDropbox Staff
    Hi BattleShip, thanks for posting today! 

    Do you wish to export members' data, or the content of your Dropbox account? 

    If you wish for your content to sync and export directly to your SIEM, keep in mind that there's no direct way that you can achieve this.

    You could use an API, or a third-party account that would help with this. 

    Let me know.
    • BattleShip's avatar
      BattleShip
      Explorer | Level 3

      Hi Megan 

       

      Thanks for responding. I would like to export Audit events from our business dropbox account like File creation, deletion, File share status and so on asper security monitoring to our SIEM solution (Elasticsearch)

       

      Can you please share me the suitable API/method in achieving this.

      • Greg-DB's avatar
        Greg-DB
        Icon for Dropbox Staff rankDropbox Staff

        BattleShip If you'd like to write some code to programmatically export events from your Business team, you could use the /2/team_log/get_events[/continue] endpoints.

         

        Those are links to the documentation for the HTTPS endpoints themselves, but we recommend using one of the official SDKs if possible. Those have corresponding native methods for the HTTPS endpoints.

About Dropbox API Support & Feedback

Node avatar for Dropbox API Support & Feedback
Find help with the Dropbox API from other developers.5,950 PostsLatest Activity: 18 hours ago
352 Following

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X or Facebook.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!