Ingest logs from ForgeRock Identity Cloud

OpenSearch
, ,
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):

OpenSearch

Describe the issue:

I need some help with some resources or guide to ingest logs from ForgeRock Identity Cloud REST API endpoints https://backstage.forgerock.com/docs/idcloud/latest/tenants/audit-debug-logs.html. Do I need to poll logs using logstash or a filebeat and then index those logs which are in JSON endpoint to opensearch? If anyone has configure this or have some helpful guide which they can share please help.

Configuration:

Relevant Logs or Screenshots:

2

Logstash can solve your problem, you can use logstash http_poller input plugin to poll logs for the http endpoint and use elasticsearch output plugin( or opensearch output plugin )to ingest the polled logs, like this:

input {
  http_poller {
    urls => {
      }
  }
}

output {
  elasticsearch {
  
  }
}