Replicate Content Logs in the admin panel

[GrantWa3]

Hi all. First thank you for all your help. Is there a way to replicate adobe content logs that is in the admin panel? Ultimately we are needing a way to see shared public links in Adobe products ( Reader, Acrobat, Photoshop, Illustrator, Adobe XD etc.) We have received good info from the user API and using Adobe io events using Creative Cloud libraries, Creative Cloud Assets, Adobe XD cloud docs providers from the developer portal. However, the sharing link and auditing data like the content logs have are missing. 

Optimal solution is use an api or webhook to get the events like content logs have in the exported CSV file from the adobe admin console. Again appreciate the help! thank you. 

[sarav_prakash]

Hi @GrantWa3 , adobe developer console provides extensive log support that can be forwarded to local or organization logging tools like Splunk / Azure Log Analytics / New Relic etc. 

Please follow this guide https://developer.adobe.com/app-builder/docs/guides/application_logging/

I did setup from developer console into our splunk cloud by following these steps https://developer.adobe.com/app-builder/docs/guides/application_logging/splunk_cloud/

Try this, hope this helps. 

[GrantWa3]

Thank you for this. This was helpful. To further expand, does this have the public link sharing data in the logging? This seems like I will need to create an app that runs the aio. Is this correct?

[sarav_prakash]

Yes. This was my assumption. You are tapping the io events from creative cloud and running some IO action using AppBuilder. And you need to listen to logs generated. This is easier since all io events gets subscribed and action will log, perform additional tasks. 

If you are NOT running App Builder, pls disregard. 

[GrantWa3]

Can this be done by the IO action natively without building a custom app? I would prefer to do this without building an App.

[tmj]

Hi @GrantWa3 - I recommend you contact Customer Support through your existing channels. They should be able to provide a more authoritative answer. 

[GrantWa3]

Hi @tmj I have and they stated the forums were the only support mechanism for Adobe I/O. do you have a support contact that I can be directed to to help with this?

[tmj]

Let me see what I can do. 

[GrantWa3]

Thank you @tmj 

[MandarKa2]

Hi @GrantWa3 ,
Thanks for reaching out!
We do not support any APIs or webhooks for consuming the information provided by Content logs. Currently, the information is available only via a CSV export on Admin console.

To understand this query better, can you please elaborate on how you want to use the information provided by Content logs?

Thanks!

[GrantWa3]

Thank you @MandarKa2 . Our main goal right now is to be able to ingest into our SIEM any shared links internally or externally to the company to make sure that we maintain compliance. We would also like to see what folder and to whom it is shared with. We have a lot of automated processes where the content logs CSV export would require a IT Admin to export it multiple times a day. The logs do not have to be real time logs to the SIEM, but a batch import every hour or a reasonable amount of time frame is sufficient. We have several design teams that use Adobe XD and other Adobe products that need to share designs externally. We also have several team members that only share designs internally and are not allowed to share externally. The external shares are random domains and are not the same individuals or domains so white/black listing domains is not an option. To our knowledge and from support calls share restriction settings is a global setting in our tenant and can not be customized to internal users. Thus we would like to take the route of log and audit and allow sharing out to everyone, and educate on the ones that do not have this access. The data in the content logs is perfect for what we need, and would be sufficient. However does not allow us to easily ingest into our SIEM. Please let me know if you need more clarification. 

[MandarKa2]

Thanks @GrantWa3  for the detailed explanation. 
This clarifies the need. At this moment, the only way we expose this information is through the Content logs CSV export on Admin console. 
However, we will note this requirement as reference for introducing future improvements. Thanks! 
Regards,
Mandar Kale 

[GrantWa3]

@MandarKa2  How do major companies manage and audit these type of links? I can't be the only one requesting this. Seems like a basic security requirement.

[MandarKa2]

@GrantWa3  -  Customers have used the content logs CSV export in Admin Console to serve their requirements. From a security standpoint, the information is logged and accessible to admins for their audit use. 

The requirement to have an API or web-hook based streaming is an extensibility that will facilitate the use-cases you are describing. So far we have not heard similar requests, but we do take your use-case as a guidance to inform our future investments in this area.