Configure audit log export via API

Open the CLI.
Create a virtual environment:
```
python3 -m venv .venv
```
Activate the virtual environment:
```
source .venv/bin/activate
```
Go to the script folder:
```
cd auditlog-integration
```
Install the necessary dependencies:
```
pip3 install -r requirements.txt
```
Create a .env configuration file:
```
touch .env
```
Open the .env configuration file:
```
nano .env
```
Fill in the .env configuration file:

8.1. Add a block with authentication parameters for the Audit Logs service API:
```
AUDIT_LOGS_URL=<base_url>/v1/logs
USERNAME=<username>
PASSWORD=<password>
ACCOUNT_ID=<account_id>
```
Specify:
- <base_url> — the URL for accessing the audit log API in the required pool. You can find the list of URLs in the Audit logs subsection of the List of URLs guide;
- <username> — the name of the service user you created in step 1;
- <password> — password of the service user. If the password contains the characters [ ] \ ^ $ . | ? * + ( ), escape them — place a backslash before the character \;
- <account_id> — account number, which can be viewed in the control panel in the upper-right corner.
8.2. Add a block with event submission parameters:
```
TRANSPORT_TYPE=file
```
By default, logs are saved in the script folder to the events.txt file.

8.3. Add a line with the API request interval:
```
POLL_INTERVAL=<poll_interval>
```
Specify <poll_interval> — API polling interval in seconds (default is 30).

8.4. Save and exit the file by sequentially pressing Ctrl+X → Y → Enter.

8.5. Optional: change the name of the file where logs are saved; to do this, in the script folder in the savers.py file, in the class FileSaver block, change the value in the self.filename field.
Run the script:
```
python3 main.py
```

Open the CLI.
Create a virtual environment:
```
python3 -m venv .venv
```
Activate the virtual environment:
```
source .venv/bin/activate
```
Go to the script folder:
```
cd auditlog-integration
```
Install the necessary dependencies:
```
pip3 install -r requirements.txt
```
Create the .env configuration file:
```
touch .env
```
Open the .env configuration file:
```
nano .env
```
Fill in the .env configuration file:

8.1. Add a block with authentication parameters for the Audit Logs service API:
```
AUDIT_LOGS_URL=<base_url>/v1/logs
USERNAME=<username>
PASSWORD=<password>
ACCOUNT_ID=<account_id>
```
Specify:
- <base_url> — URL for accessing the audit log API in the required pool. The list of URLs can be found in the Audit logs subsection of the List of URLs guide;
- <username> — username of the service user you created in step 1;
- <password> — password of the service user. If the password contains the characters [ ] \ ^ $ . | ? * + ( ), escape them — place a backslash before the character \;
- <account_id> — account number, which can be viewed in the control panel in the upper-right corner.
8.2. Add a block with event submission parameters:
```
TRANSPORT_TYPE=syslog
SYSLOG_HOST=<syslog_host>
SYSLOG_PORT=<syslog_port>
```
Specify:
- <syslog_host> — IP address of the SIEM system;
- <syslog_port> — port on the specified IP address.
The IP address and port can be found in your SIEM system settings.

8.3. Add a line with the API request interval:
```
POLL_INTERVAL=<poll_interval>
```
Specify <poll_interval> — API polling interval in seconds (default is 30).

8.4. Save and exit the file by sequentially pressing Ctrl+X → Y → Enter.
Run the script:
```
python3 main.py
```

Open the CLI.
Create a virtual environment:
```
python3 -m venv .venv
```
Activate the virtual environment:
```
source .venv/bin/activate
```
Go to the script folder:
```
cd auditlog-integration
```
Install the necessary dependencies:
```
pip3 install -r requirements.txt
```
Create the .env configuration file:
```
touch .env
```
Open the .env configuration file:
```
nano .env
```
Fill in the .env configuration file:

8.1. Add a block with authentication parameters for the Audit Logs service API:
```
AUDIT_LOGS_URL=<base_url>/v1/logs
USERNAME=<username>
PASSWORD=<password>
ACCOUNT_ID=<account_id>
```
Specify:
- <base_url> — URL for accessing the audit log API in the required pool. The list of URLs can be found in the Audit logs subsection of the List of URLs guide;
- <username> — username of the service user you created in step 1;
- <password> — password of the service user. If the password contains the characters [ ] \ ^ $ . | ? * + ( ), escape them — place a backslash before the character \;
- <account_id> — account number, which can be viewed in the control panel in the upper-right corner.
8.2. Add a block with event submission parameters:
```
TRANSPORT_TYPE=http
HTTP_URL=<http_url>
HTTP_USERNAME=<http_username>
HTTP_PASSWORD=<http_password>
HTTP_VERIFY_SSL=<verify_ssl>
```
Specify:
- <http_url> — URL of the endpoint where the SIEM system receives logs;
- <http_username> — SIEM system username;
- <http_password> — SIEM system user password;
- <verify_ssl> — whether TLS(SSL) certificate verification is required when connecting to the SIEM system: true — perform verification, false — do not perform verification.
8.3. Add a line with the API request interval:
```
POLL_INTERVAL=<poll_interval>
```
Specify <poll_interval> — API polling interval in seconds (default is 30).

8.4. Save and exit the file by sequentially pressing Ctrl+X → Y → Enter.
Run the script:
```
python3 main.py
```

1. Create a service user

2. Get an account IAM token

3. Get the script for exporting audit logs to a SIEM system

4. Configure and run the script