This workflow template is designed to streamline the process of sending Torq audit and activity logs to Singularity XDR. By scheduling regular log retrievals, it ensures that logs are consistently pulled, reformatted from JSON to plain text, and sent in batch transactions. This automation enhances log management efficiency, providing businesses with timely insights into system activities and audits, crucial for maintaining security and compliance.
Use Cases
Example , Function
Workflow Breakdown
Runs on an schedule and pull the audit and activity logs.
Reformat logs from JSON to plain text, one entry per line separated by a newline.
Set a checkpoint using global variables for each run.
Send logs to Singularity XDR in a batch transaction.
Vendors
Utils, SentinelOne, Torq
Workflow Output
Log files will be created on SingularityXDR named after the type of log and the timestamp.
Tips
Upload Logs action require a "Log Write Access" API key.