Logs Collected

Several different types of events are collected from Okta System Log

  • Application Events
  • Group Events
  • Policy Events
  • System Events
  • Security Events
  • User Events

Below is an example of User related events being sent to Google Stackdriver Logging using the BindPlane Log Agent.

Okta User Event Logs ExampleOkta User Event Logs Example

Okta User Event Logs Example

Log Collection Setup

Follow these steps to setup log collection from Okta.

Pre-requisites

  • A valid Okta login URL
  • A valid Okta API token with read access to /api/v1/logs

Configure an Okta Source

  1. Install the BindPlane Log Agent on the host system.
  2. Login to BindPlane and select the Logs tab.
Logs TabLogs Tab

Logs Tab

  1. Select the Sources tab.
Sources TabSources Tab

Sources Tab

  1. In the top-right portion of the screen, click on the Add Source Configuration button
Add Source Configuration ButtonAdd Source Configuration Button

Add Source Configuration Button

  1. Choose Okta
  2. Fill out the Okta log configuration options.
Okta Log Configuration FormOkta Log Configuration Form

Okta Log Configuration Form