Skip to main content

GitHub Audit logs

The GitHub audit logs managed log source lets you ingest your GitHub audit logs directly into Matano.

The Github audit log tracks events triggered by activities that affect your GitHub organization. For a complete list of supported events, consult the GitHub audit log documentation.

Usage​

Use the managed log source by specifying the managed.type property in your log_source as GITHUB_AUDIT.

name: "github_audit"

managed:
  type: "GITHUB_AUDIT"

Tables​

The GitHub audit logs history managed log source supports a single table containing GitHub audit log data.

Ingest​

S3 (GitHub audit log streaming)​

Matano supports ingestion using S3. You can use GitHub's audit log streaming feature to deliver GitHub audit logs to an S3 bucket. Consult the GitHub documentation for more information.

Schema​

GitHub audit log data is normalized to ECS fields. Custom fields are normalized into the github field. You can view the complete mapping to see the full schema.