Configure audit log export via API

Open the CLI.
Create a virtual environment:
```
python3 -m venv .venv
```
Activate the virtual environment:
```
source .venv/bin/activate
```
Go to the script folder:
```
cd auditlog-integration
```
Install the necessary dependencies:
```
pip3 install -r requirements.txt
```
Create a configuration file .env:
```
touch .env
```
Open the configuration file .env:
```
nano .env
```
Fill in the configuration file .env:

8.1. Add a block with authentication parameters for the Audit Logs service API:
```
AUDIT_LOGS_URL=<base_url>/v1/logs
USERNAME=<username>
PASSWORD=<password>
ACCOUNT_ID=<account_id>
```
Specify:
- <base_url> — the URL for accessing the audit log API in the required pool. The list of URLs can be found in the Audit Logs subsection of the URL List guide;
- <username> — the name of the service user you created in step 1;
- <password> — the service user password. If the password contains characters [ ] \ ^ $. |? * + (), escape them by placing a backslash \;
- <account_id> — the account ID; it can be found in the Control Panel in the top right corner.
8.2. Add a block with event submission parameters:
```
TRANSPORT_TYPE=file
```
By default, logs are saved in the script folder to the events.txt file.

8.3. Add a line with the API request interval:
```
POLL_INTERVAL=<poll_interval>
```
Specify <poll_interval> — the API polling interval in seconds (default is 30).

8.4. Exit the file and save changes; to do this, press Ctrl+X → Y → Enter.

8.5. Optional: change the file name where logs are saved; to do this, in the script folder, edit the savers.py file in the class FileSaver block by changing the value in the self.filename.
Run the script:
```
python3 main.py
```

Open the CLI.
Create a virtual environment:
```
python3 -m venv .venv
```
Activate the virtual environment:
```
source .venv/bin/activate
```
Go to the script folder:
```
cd auditlog-integration
```
Install the necessary dependencies:
```
pip3 install -r requirements.txt
```
Create a .env configuration file:
```
touch .env
```
Open the .env configuration file:
```
nano .env
```
Fill in the .env configuration file:

8.1. Add a block with authentication parameters for the Audit Logs service API:
```
AUDIT_LOGS_URL=<base_url>/v1/logs
USERNAME=<username>
PASSWORD=<password>
ACCOUNT_ID=<account_id>
```
Specify:
- <base_url> — the URL for accessing the audit log API in the required pool. The list of URLs can be found in the Audit Logs subsection of the URL List guide;
- <username> — the name of the service user you created in step 1;
- <password> — the service user password. If the password contains characters [ ] \ ^ $. |? * + (), escape them by placing a backslash \;
- <account_id> — the account ID; it can be found in the Control Panel in the top right corner.
8.2. Add a block with event submission parameters:
```
TRANSPORT_TYPE=syslog
SYSLOG_HOST=<syslog_host>
SYSLOG_PORT=<syslog_port>
```
Specify:
- <syslog_host> — the IP address of the SIEM system;
- <syslog_port> — the port at the specified IP address.
The IP address and port can be found in your SIEM system settings.

8.3. Add a line with the API request interval:
```
POLL_INTERVAL=<poll_interval>
```
Specify <poll_interval> — the API polling interval in seconds (default is 30).

8.4. Exit the file and save changes; to do this, press Ctrl+X → Y → Enter.
Run the script:
```
python3 main.py
```

Open the CLI.
Create a virtual environment:
```
python3 -m venv .venv
```
Activate the virtual environment:
```
source .venv/bin/activate
```
Go to the script folder:
```
cd auditlog-integration
```
Install the necessary dependencies:
```
pip3 install -r requirements.txt
```
Create a .env configuration file:
```
touch .env
```
Open the .env configuration file:
```
nano .env
```
Fill in the .env configuration file:

8.1. Add a block with authentication parameters for the Audit Logs service API:
```
AUDIT_LOGS_URL=<base_url>/v1/logs
USERNAME=<username>
PASSWORD=<password>
ACCOUNT_ID=<account_id>
```
Specify:
- <base_url> — the URL for accessing the audit log API in the required pool. The list of URLs can be found in the Audit Logs subsection of the URL List guide;
- <username> — the name of the service user you created in step 1;
- <password> — the service user password. If the password contains characters [ ] \ ^ $. |? * + (), escape them by placing a backslash \;
- <account_id> — the account ID; it can be found in the Control Panel in the top right corner.
8.2. Add a block with event submission parameters:
```
TRANSPORT_TYPE=http
HTTP_URL=<http_url>
HTTP_USERNAME=<http_username>
HTTP_PASSWORD=<http_password>
HTTP_VERIFY_SSL=<verify_ssl>
```
Specify:
- <http_url> — the URL of the endpoint where the SIEM system receives logs;
- <http_username> — the username for the SIEM system;
- <http_password> — the password for the SIEM system user;
- <verify_ssl> — whether TLS (SSL) certificate verification is required when connecting to the SIEM system: true — perform verification, false — do not perform verification.
8.3. Add a line with the API request interval:
```
POLL_INTERVAL=<poll_interval>
```
Specify <poll_interval> — the API polling interval in seconds (default is 30).

8.4. Exit the file and save changes; to do this, press Ctrl+X → Y → Enter.
Run the script:
```
python3 main.py
```

1. Create a service user

2. Get an account IAM token

3. Get the script for exporting audit logs to a SIEM system

4. Configure and run the script