Logz.io Connector

This guide covers implementing the Logz.io connector. Logz.io is a cloud-based observability platform built on open-source tools like Elasticsearch, Kibana, and Grafana that provides log management, metrics, and distributed tracing.

Descope can automatically collect authentication logs and audit events and stream them to your Logz.io account for centralized monitoring and analysis.

Configure Logz.io connector

Navigate to the Connectors page in the Descope Console and select Logz.io to create a new Logz.io connector.

The following parameters are required to use it:

• Connector Name: Provide a unique name for your connector. This assists in distinguishing it, especially when multiple connectors are derived from the same template.
• Connector Description: (Optional) Briefly explain the purpose of this connector.
• Shipping Token: In Logz.io, navigate to Settings and select Manage Tokens from the sidebar, then select the Data Shipping Tokens tab. Create a new token or use an existing one, then copy it to include in the connector configuration.
• Listener URL: The region-specific listener endpoint for your Logz.io account (for example, listener.logz.io, listener-uk.logz.io, listener-au.logz.io, listener-ca.logz.io, or listener-nl.logz.io). This must match the region your Logz.io account was created in.
• Shipping Method: Select the shipping method for your logs.
  • HTTP Bulk: Use this method to send logs to Logz.io using the HTTP protocol.
  • OpenTelemetry (OTLP): Use this method to send logs to Logz.io using the OpenTelemetry protocol.
• Log Type: The Logz.io type used for parsing. Applies to HTTP bulk shipping only and cannot contain spaces.
• Stream Audit Events: Select which events are sent to Logz.io. Descopers can allow all audit events or filter them based on certain actions that occur or tenants in the project.
• Stream Troubleshooting Events: Decide whether troubleshooting events are also sent to Logz.io.

Testing

Before creating your connector, its important to verify if the connector configurations works. For this simply click on "Test" and view the Test Results panel. Confirm it works and click Create.

Viewing Audit Logs

Once configured, audit logs are automatically streamed to Logz.io. The connector can be tested while configuring it to ensure the logs are being sent and collected properly.

The logs can still be viewed in Descope under the Audit and Troubleshoot section of the Descope Console.

In Logz.io, navigate to Logs to view your Descope audit events.

Each log entry will contain detailed information about events, including user actions, timestamps, IP addresses, and other relevant data. You can click on any log entry to view its full details and use Logz.io's search and analysis tools to gain insights into your events.