Use the Log to server action in the Logging package to export the runtime logs to an external SIEM server when you run a API Task.

Overview

The Log to server action allows you to export the runtime logs to an external server (SIEM). You can monitor the performance, errors and usage of API Tasks.

Ensure that integration settings for SIEM is configured before enabling this option in Automation logs. For more information about configuring the SIEM integration settings, see Configure integration with SIEM.

The following SIEM tools are supported:

  • OpenText Enterprise Security Manager (formerly known as ArcSight)
  • Qradar
  • Splunk
  • Sumologic
The log content includes the following information:
Parameter Description
logMessage The log message contains the custom log text and the variable values (both input and output variables).
executionId The execution id of the automation. The execution id is included in the URL, when you open the Activity page of the automation.
logLevel The log level that is set when creating the automation.
sysLogSource The tag used as an identifier for the logs.
botName The automation name entered when creating the automation.
botId The bot id of the automation. The bot id is included in the URL when you open the bot in the bot editor workspace.
logCreatedTime The time when the bot was created. This entry includes the date and the time.

Settings

  • Text to log: Enter a name for the logs.
  • You can export the information logged in the variables using the Variables to log option. The logging of String, Number, Datetime and Boolean variables are supported

    Choose one of the following:

    • By type: Use this option to log variables based on the type. You can log the variables individually or together.
      Note: When you select the By type option, you can also log variables that are created later after you have added the Log variables to file action.
    • Custom selection: Use this option to select and log the variables individually or together.
  • Data source tag (optional): Add tags for the identifying the log entries. The tags allows easy filtering of the logs in the SIEM server.
  • Log level: Select an appropriate level for the log information based on the category.

    The following log levels are supported:

    • Emergency
    • Error
    • Warning
    • Info
    • Debug