Cannot Send JetBrains Console Audit Logs to a SIEM

Question

Can the JetBrains Console audit log be streamed to a SIEM through syslog, a webhook, or a built-in integration, or pulled through an API? What retention applies to audit events?

Answer

JetBrains Console currently has no native streaming of audit events to a SIEM. There is no syslog output, webhook, or built-in SIEM integration.

There is no public API for audit events at this time, so no authentication method or rate limits are published. The retention period for audit events is not published. SIEM streaming and a public audit API are known requests with no published release date.

The supported way to get audit events out of JetBrains Console is the CSV export on the Audit page:

1. In JetBrains Console, select Audit in the sidebar.
2. Click Download in the top-right corner.
3. Select a predefined time range or a custom date range. Unlike the table on the page, the export is not limited to the last 90 days.
4. To export all events, click Reset in the principal, action, and target filters.
5. Click Download.

For each event, the CSV file contains the timestamp, principal, action, target, result, and event metadata. Each export is a manual download. The export can be repeated on a regular schedule, and the file ingested into the SIEM.

Viewing and exporting the audit log requires the Manage organization permission. The full procedure is in Export the audit log.