---
title: "Configure audit log export via API for integration with any SIEM system"
sidebar_label: "Configure audit log export for SIEM integration"
sidebar_position: 1
description: "How to configure audit log export via API for integration with any SIEM system"
---

import ExportLogsViaApiScript from '@site/i18n/en/docusaurus-plugin-content-docs/current/_partials/audit-logs/export-logs-via-api-script.mdx'
import Formbricks from '@theme/MDXComponents/Formbricks'

# Configure audit log export via API for integration with any SIEM system

:::info

This is a guide for configuring audit log export via [Audit Logs API](/api/audit-logs/) to your SIEM system. You must perform the settings on the SIEM system side yourself according to its official documentation. For integration with RuSIEM and Wazuh, use the following instructions: [Configure integration with RuSIEM](/audit-logs/siem-integration/integration-with-rusiem.mdx) and [Configure integration with Wazuh](/audit-logs/siem-integration/integration-with-wazuh.mdx).

:::

1. [Create a service user](#create-service-user).
2. [Get an IAM token for the account](#create-iam-token-account-scoped).
3. [Get the script for audit log export](#get-script).
4. [Configure and run the script](#configure-and-start-script).
5. [Configure log ingestion in the SIEM system](#configure-log-ingestion-in-siem).

<ExportLogsViaApiScript />

## 5. Configure log ingestion in the SIEM system \{#configure-log-ingestion-in-siem}

Configure log ingestion in your SIEM system. Use the official documentation for your SIEM system.

<Formbricks />