GitLab Audit Events Dashboard

Overview

GitLab is a source control and DevOps platform that helps companies make, secure, and deploy software. Integrate with GitLab Audit Events to strengthen security measures, respond to incidents, and adhere to compliance standards. Datadog automatically parses GitLab Audit Events as logs, so you can filter by user ID, IP address, or event name. This helps identify anomalies, like suspicious login attempts or unusual activity. The integration also includes an out-of-the-box dashboard for monitoring activity, which you can customize to meet your needs.

Enhance security and compliance by tracking all GitLab Audit Events — from day-to-day user actions to compliance reports. For instance:

• Track merge request activity by user and project, including bot actions and changes to project merge policies
• Generate a report of GPG keys, personal access tokens, and deploy tokens, from creation to removal.

Search for source:gitlab-audit-events to view your GitLab Audit Events in Datadog’s Logs Management product, and leverage Datadog’s analysis tools to improve security, performance, and operational insights.

Setup

To integrate GitLab Audit Events with Datadog, Datadog connects to GitLab using OAuth. The authenticated user must have admin privileges to set up this integration. Here are the requirements for the user who authenticates this integration:

• A Premium or Ultimate GitLab subscription
• Account owner or admin permissions to access Audit Events for all groups, projects, and users

Installation

1. Navigate to the Integrations Page and search for the “GitLab Audit Events” Integration.
2. Click the tile.
3. To add an account to install the integration, click the Add GitLab Account button.
4. After reading the instructions in the modal, click the Authorize button, which redirects you to the GitLab Login Page.
5. Using an GitLab administrator’s account, log in to GitLab.
6. On the screen requesting access to the api scope click Authorize. This allows Datadog to view audit events.
7. You’re redirected back to Datadog’s GitHub Audit Events tile with a new account. Datadog recommends changing the ‘Account Name’ to something easier to remember.

Data Collected

Logs

GitLab Audit Events collects all Audit Event Types from GitLab, as logs.

Troubleshooting

Need help? Contact Datadog support.