Automated Export of Audit Data

copperblue68

Hi,
I'm looking for a way to automate audit log collection to a third-party platform. I know we can export manually via CSV etc but I need something that picks up events quickly. For instance, if a blocked agent were to try logging in, I need to know about this ASAP not when I've run a daily/weekly CSV export.
Ideally, osTicket would export (push) directly via rsyslog to a remote platform, but I know this feature isn't available (yet).
The next best option would be write some code to attach via the API from the remote end and pull the data. Does anyone know if this possible? If not, is there any way at all to automate log export?
Thanks

KevinTheJedi

copperblue68

There is nothing for this at all. The api is only for ticket creation. You would need to connect to the database and pull from there.

Cheers.

copperblue68

Ok, thanks for the reply. We should be able to query the ost_audit and ost_syslog tables to get what we need.
One piece of clarification though please....
I can see that the event_id and staff_id columns etc in ost_audit map clearly to their related tables. Where can I look up the values in the object_id column? There doesn't seem to be an ost_object table.
Thanks

KevinTheJedi

copperblue68

If I were you I'd go look at the audit plugin code. object_id is the object's PK.

Cheers.

copperblue68

OK, thanks again.