Replicate Content Logs in the admin panel

[GrantWa3]

Hi all. First thank you for all your help. Is there a way to replicate adobe content logs that is in the admin panel? Ultimately we are needing a way to see shared public links in Adobe products ( Reader, Acrobat, Photoshop, Illustrator, Adobe XD etc.) We have received good info from the user API and using Adobe io events using Creative Cloud libraries, Creative Cloud Assets, Adobe XD cloud docs providers from the developer portal. However, the sharing link and auditing data like the content logs have are missing. 

Optimal solution is use an api or webhook to get the events like content logs have in the exported CSV file from the adobe admin console. Again appreciate the help! thank you. 

[sarav_prakash]

Hi @GrantWa3 , adobe developer console provides extensive log support that can be forwarded to local or organization logging tools like Splunk / Azure Log Analytics / New Relic etc. 

Please follow this guide https://developer.adobe.com/app-builder/docs/guides/application_logging/

I did setup from developer console into our splunk cloud by following these steps https://developer.adobe.com/app-builder/docs/guides/application_logging/splunk_cloud/

Try this, hope this helps. 

[GrantWa3]

Thank you for this. This was helpful. To further expand, does this have the public link sharing data in the logging? This seems like I will need to create an app that runs the aio. Is this correct?

[sarav_prakash]

Yes. This was my assumption. You are tapping the io events from creative cloud and running some IO action using AppBuilder. And you need to listen to logs generated. This is easier since all io events gets subscribed and action will log, perform additional tasks. 

If you are NOT running App Builder, pls disregard. 

[GrantWa3]

Can this be done by the IO action natively without building a custom app? I would prefer to do this without building an App.

[tmj]

Hi @GrantWa3 - I recommend you contact Customer Support through your existing channels. They should be able to provide a more authoritative answer. 

[GrantWa3]

Hi @tmj I have and they stated the forums were the only support mechanism for Adobe I/O. do you have a support contact that I can be directed to to help with this?

[tmj]

Let me see what I can do. 

[GrantWa3]

Thank you @tmj 

[MandarKa2]

Hi @GrantWa3 ,
Thanks for reaching out!
We do not support any APIs or webhooks for consuming the information provided by Content logs. Currently, the information is available only via a CSV export on Admin console.

To understand this query better, can you please elaborate on how you want to use the information provided by Content logs?

Thanks!

[GrantWa3]

Thank you @MandarKa2 . Our main goal right now is to be able to ingest into our SIEM any shared links internally or externally to the company to make sure that we maintain compliance. We would also like to see what folder and to whom it is shared with. We have a lot of automated processes where the content logs CSV export would require a IT Admin to export it multiple times a day. The logs do not have to be real time logs to the SIEM, but a batch import every hour or a reasonable amount of time frame is sufficient. We have several design teams that use Adobe XD and other Adobe products that need to share designs externally. We also have several team members that only share designs internally and are not allowed to share externally. The external shares are random domains and are not the same individuals or domains so white/black listing domains is not an option. To our knowledge and from support calls share restriction settings is a global setting in our tenant and can not be customized to internal users. Thus we would like to take the route of log and audit and allow sharing out to everyone, and educate on the ones that do not have this access. The data in the content logs is perfect for what we need, and would be sufficient. However does not allow us to easily ingest into our SIEM. Please let me know if you need more clarification. 

[MandarKa2]

Thanks @GrantWa3  for the detailed explanation. 
This clarifies the need. At this moment, the only way we expose this information is through the Content logs CSV export on Admin console. 
However, we will note this requirement as reference for introducing future improvements. Thanks! 
Regards,
Mandar Kale 

[GrantWa3]

@MandarKa2  How do major companies manage and audit these type of links? I can't be the only one requesting this. Seems like a basic security requirement.

[MandarKa2]

@GrantWa3  -  Customers have used the content logs CSV export in Admin Console to serve their requirements. From a security standpoint, the information is logged and accessible to admins for their audit use. 

The requirement to have an API or web-hook based streaming is an extensibility that will facilitate the use-cases you are describing. So far we have not heard similar requests, but we do take your use-case as a guidance to inform our future investments in this area. 

[kaisekarenet]

To replicate Adobe Content Logs and access information about shared public links in Adobe products, including Adobe Reader, Acrobat, Photoshop, Illustrator, and Adobe XD, you can follow these approaches:

**1. Adobe Admin Console APIs and Webhooks

Adobe does not provide direct APIs or webhooks specifically for accessing sharing link data and detailed content logs like those in the Admin Console. However, you can use the available APIs and events to gather related information.

a. Adobe I/O Events:

• Use Adobe I/O Events to subscribe to various Creative Cloud events.
• Events such as file access or changes can give insights into user activity, though direct sharing link information may not be available.

b. Adobe Creative Cloud Libraries API:

• Use the Creative Cloud Libraries API to manage assets and understand library interactions.

c. Adobe XD Cloud Docs Providers API:

• Use the Adobe XD Cloud Docs Providers API for accessing cloud documents and interactions.

**2. Adobe Audit Logs (Admin Console)

While Adobe does not provide APIs for direct access to the Admin Console logs, you can manually export audit logs from the Admin Console.

Steps:

1. Log in to Adobe Admin Console:

   • Navigate to the Admin Console at adminconsole.adobe.com.

2. Access Audit Logs:

   • Go to the "Reports" section or "Audit Logs" (this may vary based on your Adobe subscription).

3. Export Logs:

   • Export the logs as CSV files to analyze shared link activities manually.

**3. Custom Solutions and Integrations

If the built-in tools and APIs do not meet your needs, consider creating a custom solution:

1. Custom Integration:

   • Develop a custom integration that combines API data from Adobe products with manual audit log exports to create a comprehensive reporting solution.

2. Third-Party Tools:

   • Explore third-party tools and services that integrate with Adobe Creative Cloud and provide extended logging and auditing capabilities.

Summary

• Use Adobe I/O Events and available APIs for general activity data.
• Export audit logs manually from the Admin Console for detailed sharing link information.
• Consider custom integrations or third-party tools for more comprehensive solutions.

This approach will help you gather and analyze the data related to shared public links and user activities.