Overview

This integration enables the collection of Confluent Cloud Audit Logs to capture activity within your Confluent Account.

This allows you to:

• Track and attribute accesses to your Confluent Cloud resources.
• Identify abnormal or suspicious activitiy.
• Proactively monitor and resolve security risks.

The Datadog Confluent Cloud Audit Logs integration collects events from your Confluent Cloud audit log topic and ingests them into Datadog as logs. For a complete view of all audit log event types, see the Confluent Cloud auditable event methods schema.

Search for source:confluent-cloud-audit-logs to view your Confluent Cloud Audit Logs in Datadog’s Logs Management product.

Setup

Installation

Refer to Confluent’s audit log setup instructions. While this documentation provides Java code snippets, you only need to copy the necessary values for configuring the tile.

1. Use the Confluent CLI to generate the API key and API secret pair for your audit log cluster. Keep in mind that OrganizationAdmin permissions are needed to ingest audit logs.
2. Copy the bootstrap.servers string.
3. Enter the API key, API token, and bootstrap.servers string into the integration tile.
4. Click “Save”.

Your Confluent Cloud audit logs should begin ingesting automatically within 5 minutes.

Data Collected

Metrics

Confluent Cloud Audit Logs does not include any metrics.

Service Checks

Confluent Cloud Audit Logs does not include any service checks.

Logs

Confluent Cloud Audit Logs collects data from Confluent Cloud’s confluent-audit-log-events topic.

Troubleshooting

Need help? Contact Datadog support.