You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Appflow updated for V2 apps
* updated additional app docs with collection process info
* minor fix
* minor fix
* converted to reuse file
* minor path fix
* Update app-collection-option-2.md
* Update app-collection-option-3.md
1Password is a secure and convenient password manager for documents, credit card information, and addresses. The Sumo Logic app for 1Password enables you to monitor sign-in and item usage events within your 1Password account. It offers insights into failed and successful authentications, breaking down events by client applications, type, category, users, and geo-location, while also identifying outliers and analyzing threats related to sign-ins. Furthermore, the app provides in-depth tracking of critical security activities such as account activations, deletions, email changes, and group creations. It visualizes audit events by geographic location, highlights risky areas, and offers detailed logs of recent access activities and role changes. This app helps secure your 1Password vault by delivering comprehensive insights into user actions and threat intelligence on clients accessing shared vaults.
13
13
@@ -25,7 +25,10 @@ The 1Password app uses the following logs:
25
25
26
26
### Sample log messages
27
27
28
-
```json title="Sign-in attempt Event"
28
+
<details>
29
+
<summary>Sign-in attempt Event</summary>
30
+
31
+
```json
29
32
{
30
33
"uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
31
34
"session_uuid": "A5K6COGVRVEJXJW3XQZGS7VAMM",
@@ -52,8 +55,12 @@ The 1Password app uses the following logs:
52
55
}
53
56
}
54
57
```
58
+
</details>
59
+
60
+
<details>
61
+
<summary>Item Usage Event</summary>
55
62
56
-
```jsontitle="Item Usage Event"
63
+
```json
57
64
{
58
65
"uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
59
66
"timestamp": "2020-06-11T16:32:50-03:00",
@@ -77,8 +84,12 @@ The 1Password app uses the following logs:
77
84
"action": "secure-copy"
78
85
}
79
86
```
87
+
</details>
88
+
89
+
<details>
90
+
<summary>Audit Events Log</summary>
80
91
81
-
```json title="Audit Events Log"
92
+
```json
82
93
{
83
94
"uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
84
95
"timestamp": "2023-03-15T16:33:50-03:00",
@@ -114,6 +125,7 @@ The 1Password app uses the following logs:
114
125
}
115
126
}
116
127
```
128
+
</details>
117
129
118
130
### Sample queries
119
131
@@ -155,15 +167,33 @@ _sourceCategory="app/"
155
167
| fields -_messageTime
156
168
```
157
169
158
-
## Collecting logs for 1Password
170
+
## Collection configuration and app installation
171
+
172
+
import CollectionConfiguration from '../../reuse/apps/collection-configuration.md';
173
+
174
+
<CollectionConfiguration/>
175
+
176
+
:::important
177
+
Use the [Cloud-to-Cloud Integration for 1Password](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/1password-source) to create the source and use the same source category while installing the app. By following these steps, you can ensure that your 1Password app is properly integrated and configured to collect and analyze your 1Password data.
178
+
:::
179
+
180
+
### Create a new collector and install the app
181
+
182
+
import AppCollectionOPtion1 from '../../reuse/apps/app-collection-option-1.md';
183
+
184
+
<AppCollectionOPtion1/>
185
+
186
+
### Use an existing collector and install the app
187
+
188
+
import AppCollectionOPtion2 from '../../reuse/apps/app-collection-option-2.md';
159
189
160
-
Follow the instructions for setting up [Cloud-to-Cloud Integration for 1Password App](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/1password-source) to create the source and use the same source category while installing the app.
190
+
<AppCollectionOPtion2/>
161
191
162
-
##Installing the 1Password app
192
+
### Use an existing source and install the app
163
193
164
-
import AppInstall from '../../reuse/apps/app-install-v2.md';
194
+
import AppCollectionOPtion3 from '../../reuse/apps/app-collection-option-3.md';
import CollectionConfiguration from '../../reuse/apps/collection-configuration.md';
126
+
127
+
<CollectionConfiguration/>
128
+
:::important
129
+
Use the [Cloud-to-Cloud Integration for Abnormal Security](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/abnormal-security-source/) to create the source and use the same source category while installing the app. By following these steps, you can ensure that your Abnormal Security app is properly integrated and configured to collect and analyze your Abnormal Security data.
130
+
:::
131
+
132
+
### Create a new collector and install the app
133
+
134
+
import AppCollectionOPtion1 from '../../reuse/apps/app-collection-option-1.md';
135
+
136
+
<AppCollectionOPtion1/>
137
+
138
+
### Use an existing collector and install the app
116
139
117
-
To set up the Cloud-to-Cloud Integration Abnormal Security Source for the Abnormal Security app, follow the instructions provided [here](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/abnormal-security-source/). These instructions will guide you through the process of creating a source using the Abnormal Security Source category, which you will need to use when installing the app. By following these steps, you can ensure that your Abnormal Security app is properly integrated and configured to collect and analyze your Abnormal Security data.
140
+
import AppCollectionOPtion2 from '../../reuse/apps/app-collection-option-2.md';
118
141
119
-
## Installing the Abnormal Security app
142
+
<AppCollectionOPtion2/>
120
143
121
-
This section has instructions for installing the Abnormal Security App for Sumo Logic and descriptions of each of the dashboards.
144
+
### Use an existing source and install the app
122
145
123
-
import AppInstall2 from '../../reuse/apps/app-install-v2.md';
146
+
import AppCollectionOPtion3 from '../../reuse/apps/app-collection-option-3.md';
The Airtable App for Sumo Logic monitors and analyzes your organization's Airtable audit logs, providing insights into user activity, data trends, and security events. This app is based on the Airtable Audit Logs, which provide detailed information on all actions performed in your Airtable account.
12
+
The Airtable app for Sumo Logic monitors and analyzes your organization's Airtable audit logs, providing insights into user activity, data trends, and security events. This app is based on the Airtable Audit Logs, which provide detailed information on all actions performed in your Airtable account.
13
13
14
-
The Airtable App makes it simple to import data from your Airtable audit logs into Sumo Logic, where you can perform real-time analysis and build dashboards to visualize key metrics. You can monitor security events and gain insights into user activity across your organization.
14
+
The Airtable app makes it simple to import data from your Airtable audit logs into Sumo Logic, where you can perform real-time analysis and build dashboards to visualize key metrics. You can monitor security events and gain insights into user activity across your organization.
15
15
16
-
The Airtable App allows you to:
16
+
The Airtable app allows you to:
17
17
* Keep track of user activity within your Airtable account in real-time.
18
18
* Analyze user actions, identify failed executions, and track trends over time.
19
19
* View a summary of audit logs in table format, enabling you to identify anomalous behavior and potential security threats.
20
20
* Create customized dashboards to visualize important metrics and track key performance indicators.
21
21
22
-
The Airtable App also offers a pre-built dashboard that enables you to start monitoring your Airtable audit logs right away. The Airtable App for Sumo Logic is especially useful for organizations that must comply with regulatory requirements or maintain a high level of security. With the ability to monitor user activity and track changes in real time, you can quickly identify potential issues and respond to security incidents as they occur.
22
+
The Airtable app also offers a pre-built dashboard that enables you to start monitoring your Airtable audit logs right away. The Airtable App for Sumo Logic is especially useful for organizations that must comply with regulatory requirements or maintain a high level of security. With the ability to monitor user activity and track changes in real time, you can quickly identify potential issues and respond to security incidents as they occur.
23
23
24
24
## Log type
25
25
@@ -29,6 +29,9 @@ To understand how to access detailed records of changes made to the Airtable Ent
29
29
30
30
### Sample log messages
31
31
32
+
<details>
33
+
<summary>Click to view the sample log message</summary>
34
+
32
35
```json
33
36
{
34
37
"enterpriseaccountid": "entdfgc0BXGp",
@@ -58,6 +61,7 @@ To understand how to access detailed records of changes made to the Airtable Ent
import CollectionConfiguration from '../../reuse/apps/collection-configuration.md';
80
+
81
+
<CollectionConfiguration/>
82
+
83
+
:::important
84
+
Use the [Cloud-to-Cloud Integration for Airtable](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/airtable-source) to create the source and use the same source category while installing the app. By following these steps, you can ensure that your Airtable app is properly integrated and configured to collect and analyze your Airtable data.
85
+
:::
86
+
87
+
### Create a new collector and install the app
88
+
89
+
import AppCollectionOPtion1 from '../../reuse/apps/app-collection-option-1.md';
90
+
91
+
<AppCollectionOPtion1/>
92
+
93
+
### Use an existing collector and install the app
94
+
95
+
import AppCollectionOPtion2 from '../../reuse/apps/app-collection-option-2.md';
96
+
97
+
<AppCollectionOPtion2/>
74
98
75
-
Before you begin, collect logs from Airtable API and ingest them into Sumo Logic. Refer to the [Airtable API Cloud-to-Cloud Integration](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/airtable-source/) to create the source and use the same source category while installing the app.
99
+
### Use an existing sourceand install the app
76
100
77
-
import AppInstall2 from '../../reuse/apps/app-install-v2.md';
101
+
import AppCollectionOPtion3 from '../../reuse/apps/app-collection-option-3.md';
78
102
79
-
<AppInstall2/>
103
+
<AppCollectionOPtion3/>
80
104
81
105
## Viewing Airtable dashboards
82
106
@@ -86,7 +110,7 @@ import ViewDashboards from '../../reuse/apps/view-dashboards.md';
86
110
87
111
### Overview
88
112
89
-
**Airtable - Overview** dashboard provides a high-level view of key metrics related to Airtable platform user activity, audits, and execution. It contains widgets that display data such as total audit logs and failed executions, action distribution, and top-performing actions and users. The dashboard also provides information on activity trends over time and user locations. The Audit Log Summary widget provides a quick overview of all platform activity. Overall, the dashboard helps users quickly understand how the platform is used and identify areas for improvement.<br/><img src={useBaseUrl('img/integrations/saas-cloud/airtable-overview.png')} alt="airtable-overview.png" width="600"/>
113
+
The **Airtable - Overview** dashboard provides a high-level view of key metrics related to Airtable platform user activity, audits, and execution. It contains widgets that display data such as total audit logs and failed executions, action distribution, and top-performing actions and users. The dashboard also provides information on activity trends over time and user locations. The Audit Log Summary widget provides a quick overview of all platform activity. Overall, the dashboard helps users quickly understand how the platform is used and identify areas for improvement.<br/><img src={useBaseUrl('img/integrations/saas-cloud/airtable-overview.png')} alt="airtable-overview.png" width="600"/>
Depending on the set up collection method, you can configure and install the app in three ways:
96
+
97
+
-**[Create a new collector and install the app](#create-a-new-collector-and-install-the-app)**. Create a new Sumo Logic Cloud-to-Cloud (C2C) source under a new Sumo Logic Collector and later install the app; Or
98
+
-**[Use an existing collector and install the app](#use-an-existing-collector-and-install-the-app)**. Create a new Sumo Logic Cloud-to-Cloud (C2C) source under an existing Sumo Logic Collector and later install the app; Or
99
+
-**[Use existing source and install the app](#use-an-existing-source-and-install-the-app)**. Use your existing configured Sumo Logic Cloud-to-Cloud (C2C) source and install the app.
100
+
101
+
:::important
102
+
Use the [Cloud-to-Cloud Integration for Atlassian](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/atlassian-source) to create the source and use the same source category while installing the app. By following these steps, you can ensure that your Atlassian app is properly integrated and configured to collect and analyze your Atlassian data.
103
+
:::
104
+
105
+
### Create a new collector and install the app
106
+
107
+
import AppCollectionOPtion1 from '../../reuse/apps/app-collection-option-1.md';
108
+
109
+
<AppCollectionOPtion1/>
110
+
111
+
### Use an existing collector and install the app
112
+
113
+
import AppCollectionOPtion2 from '../../reuse/apps/app-collection-option-2.md';
90
114
91
-
To set up [Cloud-to-Cloud Integration Atlassian Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/atlassian-source) for the Atlassian app, follow the instructions provided. These instructions will guide you through the process of creating a source using the Atlassian Source category, which you will need to use when installing the app. By following these steps, you can ensure that your Atlassian app is properly integrated and configured to collect and analyze your Atlassian data.
115
+
<AppCollectionOPtion2/>
92
116
93
-
##Installing the Atlassian app
117
+
### Use an existing source and install the app
94
118
95
-
import AppInstall2 from '../../reuse/apps/app-install-v2.md';
119
+
import AppCollectionOPtion3 from '../../reuse/apps/app-collection-option-3.md';
96
120
97
-
<AppInstall2/>
121
+
<AppCollectionOPtion3/>
98
122
99
-
## Viewing Atlassian dashboards
123
+
## Viewing the Atlassian dashboards
100
124
101
125
import ViewDashboards from '../../reuse/apps/view-dashboards.md';
0 commit comments