Exporting user login activity and user creation logs

SonarQube Server / Community Build
1
  • using SonarQube Community Edition v10.5.1
  • SonarQube is deployed on an AWS EC2 instance.

Hi,

I would like to export the following information to our enterprise SIEM:

  • When a new SonarQube user is created
  • User login activity to SonarQube (date/time of user log-in; failed login attempts, etc.)
  • When a new project/global/user token is created

Where are those information stored ?
I have looked into /var/log and /var/log/auth*.

Thank you

2

Hi @kevinz,

To track user activities like new user creation, login events, and token creations in SonarQube, I recommend utilizing the Audit Log feature available in the SonarQube Enterprise Edition. This feature provides detailed logs on user management and other critical actions, specifically tailored for your needs.

You can find more information on how to access and configure the Audit Logs feature in the following documentation link: SonarQube Audit Logs.