PingOne Platform logging and reporting
PingOne includes various auditing and reporting tools for admins to monitor events in their PingOne environments.
Use the information in this section to understand the various types of logs and reporting, and options for collecting and accessing log data.
You can retrieve logs through the Audit page, by using webhooks, or through the API. You can also use the Dashboards page, the Alerts page, and the PingOne App for Splunk to monitor your PingOne environment.
Audit
Use the Audit page in the PingOne admin console to run queries on events and actions in the PingOne environment. PingOne auditing functionality captures two types of data that are governed by different retention policies:
- User events
-
User events include user creation or deletion, authentications, updates to the user record, and other transactions related to end-user activity. User events are retained for 90 days.
- PingOne configuration events
-
Configuration events include configuration changes made to system settings, policies, applications, an integrations. Configuration events are retained for 2 years.
To retain PingOne data for longer than the standard retention periods, set up webhooks to stream the data to your own repository and configure your own retention policy. Learn more in Webhooks.
|
PingOne DaVinci data is retained for 30 days. Learn more in Debugging and analytics in the DaVinci documentation. |
Learn more about auditing in PingOne in Audit.
Webhooks
Use the Webhooks page in the PingOne admin console to set up subscriptions for auditing events.
When an event of interest occurs in PingOne, the event is pushed from PingOne to a third-party monitoring system. Webhooks are available in a Splunk-friendly format, a New-Relic-friendly format, and the Ping activity format, which is a versatile, generic JSON format also used by the PingOne API for accessing event data.
Learn more in Webhooks.
PingOne API
Use the PingOne User Activities API to monitor user activities in PingOne. The service uses stream processors that listen to users and login_attempts events. These events are collected and presented by time period.
Learn more in User activities in the PingOne Platform API Reference.
PingOne App for Splunk
Use the PingOne App for Splunk to correlate your PingOne webhook data into a meaningful dashboard. Create custom dashboards and reports, monitor activity data, and analyze event data over time.
Learn more in Installing the PingOne app for Splunk.
Dashboards
Use the Dashboards page in the PingOne console to view and monitor activities for a particular service. Each capability, such as Authentication, Authorization, Identity Verification, and so on, has its own dashboard.
Learn more in Dashboards.
Alerts
Use the Alerts page in the PingOne console to set up alert messages based on the status of certain resources. For a complete list of available alerts, in the PingOne admin console, go to Monitoring > Alerts.
Learn more in Alerts.