Hello,
since Autodesk Vault version 2021 there is new audit log how to check delete, download, login events, more in below link.
Please, is possible to consider to use CEF/LEEF format for this audit log which is standard for all SIEM?
Currently there is mutiple raws log without unique key then it is difficult to parse it in SIEM parsing rule. New CEF format for audit log will be great. It can better protect company data which will be monitored in SIEM. We can alerted many deleted files or protect it for unauthorized access to Vault.
Current log for loggin events in Vault 2023
"12/14/2022 10:12:41 AM A user has signed into the vault.
User:'Paul Black' (192.168.1.20); Vault name:'vault'; Authentication type:'Vault'; App code:'V'"
https://knowledge.autodesk.com/support/vault-products/learn-explore/caas/sfdcarticles/sfdcarticles/A...
https://knowledge.autodesk.com/support/vault-products/learn-explore/caas/CloudHelp/cloudhelp/2022/EN...
Pavel Hradilek
