You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/integrations/saas-cloud/airtable.md
+82-37Lines changed: 82 additions & 37 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,57 +21,86 @@ The Airtable app allows you to:
21
21
22
22
The Airtable app also offers a pre-built dashboard that enables you to start monitoring your Airtable audit logs right away. The Airtable App for Sumo Logic is especially useful for organizations that must comply with regulatory requirements or maintain a high level of security. With the ability to monitor user activity and track changes in real time, you can quickly identify potential issues and respond to security incidents as they occur.
23
23
24
-
## Log type
24
+
:::info
25
+
This app includes [built-in monitors](#airtable-monitors). For details on creating custom monitors, refer to the [Create monitors for Airtable app](#create-monitors-for-airtable-app).
26
+
:::
25
27
26
-
The Sumo Logic app for Airtable consumes Audit logs from your Airtable Enterprise account. Audit Logs track user activity and record changes made to the data in the system.
28
+
## Log type
27
29
28
-
To understand how to access detailed records of changes made to the Airtable Enterprise account, refer to the [Airtable Audit logs](https://support.airtable.com/docs/how-to-access-enterprise-audit-logs#interpreting-audit-logs) documentation. This documentation provides information on the different types of logs that are available, how to access them, and what information they contain.
30
+
This app uses Sumo Logic’s [Airtable Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/airtable-source/) to collect audit logs from the Airtable platform.
29
31
30
32
### Sample log messages
31
33
32
34
<details>
33
-
<summary>Click to view the sample log message</summary>
| where toLowerCase(action) matches "createserviceaccount" or toLowerCase(action) matches "createuser" or toLowerCase(action) matches "provisionuser"
97
+
| if (isNull(actor_name), "unknown", actor_name) as actor_name
98
+
| if (isNull(actor_email), "unknown", actor_email) as actor_email
99
+
| payload_name as user_name
100
+
| payload_email as email_id
101
+
| count by _messageTime, action, user_name, email_id, actor_type, actor_email, actor_name
102
+
| sort by _messageTime
103
+
| fields - _count, _messageTime
75
104
```
76
105
77
106
## Collection configuration and app installation
@@ -110,7 +139,23 @@ import ViewDashboards from '../../reuse/apps/view-dashboards.md';
110
139
111
140
### Overview
112
141
113
-
The **Airtable - Overview** dashboard provides a high-level view of key metrics related to Airtable platform user activity, audits, and execution. It contains widgets that display data such as total audit logs and failed executions, action distribution, and top-performing actions and users. The dashboard also provides information on activity trends over time and user locations. The Audit Log Summary widget provides a quick overview of all platform activity. Overall, the dashboard helps users quickly understand how the platform is used and identify areas for improvement.<br/><img src={useBaseUrl('img/integrations/saas-cloud/airtable-overview.png')} alt="airtable-overview.png" width="600"/>
142
+
The **Airtable - Overview** dashboard provides a high-level view of key metrics related to Airtable platform user activity, audits, and execution. It contains widgets that display data such as total audit logs and failed executions, action distribution, and top-performing actions and users. The dashboard also provides information on activity trends over time and user locations. The Audit Log Summary widget provides a quick overview of all platform activity. Overall, the dashboard helps users quickly understand how the platform is used and identify areas for improvement.<br/><img src={useBaseUrl('https://sumologic-app-data-v2.s3.us-east-1.amazonaws.com/dashboards/Airtable/Airtable+-+Overview.png')} alt="airtable-overview.png"/>
143
+
144
+
### Security Overview
145
+
146
+
The **Airtable - Security Overview** dashboard provides a high-level view of user activity related to security on the platform. It includes widgets that show data such as newly created accounts, access tokens, and deleted org units and workspaces. The dashboard also tracks changes in authentication methods, downloaded attachments, role updates, and user activity trends. In addition, it highlights users who have been newly assigned admin roles and any collaborator changes, helping to improve overall security monitoring.<br/><img src={useBaseUrl('https://sumologic-app-data-v2.s3.us-east-1.amazonaws.com/dashboards/Airtable/Airtable+-+Security+Overview.png')} alt="airtable-security-overview.png"/>
147
+
148
+
## Create monitors for Airtable app
149
+
150
+
import CreateMonitors from '../../reuse/apps/create-monitors.md';
151
+
152
+
<CreateMonitors/>
153
+
154
+
### Airtable monitors
155
+
156
+
| Name | Description | Trigger Type (Critical / Warning / MissingData) | Alert Condition |
157
+
|:--|:--|:--|:--|
158
+
|`Airtable - Embargoed Geo Locations of Audit Logs`| This alert is triggered when audit logs originating from sanctioned or embargoed regions are detected. This alert helps maintain adherence to legal and regulatory standards. | Critical | Count > 0 |
0 commit comments