Audit logs with SIEM integration now generally available
By Steven Van ·
Enterprise teams get a 90-day immutable record of team activity, streamable to Datadog, Splunk, S3, Google Cloud Storage or any HTTP endpoint.
Audit logs on Vercel are now generally available for Enterprise customers, with real-time export to SIEM tools. The logs give an immutable record of key events and changes within a team: who performed an action, what was done, and when. Up to 90 days of historical data is available.
Enterprise customers can stream the audit log to an existing Security Information and Event Management tool, such as Datadog or Splunk. Logs can also go to Amazon S3, Google Cloud Storage, or a custom HTTP POST endpoint. For HTTP, the body can be sent as a JSON array or as newline-delimited JSON.
Vercel's documentation now says Custom SIEM Log Streaming is being replaced by Audit Log Drains, and it includes a migration guide for teams that stream audit logs today. Custom SIEM Log Streaming is available for purchase on Enterprise plans.
