<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Has anyone indexed Azure Devops audit log? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Has-anyone-indexed-Azure-Devops-audit-log/m-p/469555#M80783</link>
    <description>&lt;P&gt;Thank you for your answer, I was just curious if anybody had done it, and if it was done, if they found an add-on or created either a scripted-  or modular-input&lt;/P&gt;</description>
    <pubDate>Thu, 20 Feb 2020 15:47:11 GMT</pubDate>
    <dc:creator>las</dc:creator>
    <dc:date>2020-02-20T15:47:11Z</dc:date>
    <item>
      <title>Has anyone indexed Azure Devops audit log?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Has-anyone-indexed-Azure-Devops-audit-log/m-p/469553#M80781</link>
      <description>&lt;P&gt;Hi.&lt;/P&gt;

&lt;P&gt;It seems Microsoft has exposed the audit log for Azure DevOps, &lt;A href="https://docs.microsoft.com/en-us/rest/api/azure/devops/audit/audit%20log/query?view=azure-devops-rest-5.1"&gt;https://docs.microsoft.com/en-us/rest/api/azure/devops/audit/audit%20log/query?view=azure-devops-rest-5.1&lt;/A&gt;&lt;BR /&gt;
Has anyone tried to index this log and how did you do it?&lt;/P&gt;

&lt;P&gt;Kind regards&lt;BR /&gt;
las&lt;/P&gt;</description>
      <pubDate>Mon, 10 Feb 2020 08:11:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Has-anyone-indexed-Azure-Devops-audit-log/m-p/469553#M80781</guid>
      <dc:creator>las</dc:creator>
      <dc:date>2020-02-10T08:11:14Z</dc:date>
    </item>
    <item>
      <title>Re: Has anyone indexed Azure Devops audit log?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Has-anyone-indexed-Azure-Devops-audit-log/m-p/469554#M80782</link>
      <description>&lt;P&gt;Hi Ias, &lt;BR /&gt;
Yes, you will need a PAT created in Azure Devops and use a Python script for the scripted input.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;personal_access_token = '&amp;lt;access_token&amp;gt;'
organization_url = 'https://&amp;lt;azure_devops_url&amp;gt;/_apis/audit/auditlog?api-version=5.1-preview.1'
json_data = requests.get(organization_url, auth=('', personal_access_token)).json()
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 20 Feb 2020 00:36:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Has-anyone-indexed-Azure-Devops-audit-log/m-p/469554#M80782</guid>
      <dc:creator>jscraig2006</dc:creator>
      <dc:date>2020-02-20T00:36:57Z</dc:date>
    </item>
    <item>
      <title>Re: Has anyone indexed Azure Devops audit log?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Has-anyone-indexed-Azure-Devops-audit-log/m-p/469555#M80783</link>
      <description>&lt;P&gt;Thank you for your answer, I was just curious if anybody had done it, and if it was done, if they found an add-on or created either a scripted-  or modular-input&lt;/P&gt;</description>
      <pubDate>Thu, 20 Feb 2020 15:47:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Has-anyone-indexed-Azure-Devops-audit-log/m-p/469555#M80783</guid>
      <dc:creator>las</dc:creator>
      <dc:date>2020-02-20T15:47:11Z</dc:date>
    </item>
  </channel>
</rss>

