Skip to main content
Audit log streaming is available on the Enterprise plan. To enable it for your organization, reach out to your account manager or help@parabola.io.
Audit log streaming sends a real-time feed of activity in your Prowork organization to a destination you control, so your security team can ingest it into a SIEM (Security Information and Event Management) tool alongside logs from the rest of your stack.

​
What events are streamed

The stream includes events covering:
  • Authentication: sign-ins, sign-outs, SSO failures, and session activity
  • User and team management: invites, role changes, deactivations, and group membership updates
  • Flow modifications: creation, edits, deletion, sharing changes, and runs
  • Integration access: credential creation, sharing, and use
  • Admin actions: changes to organization settings, integration management, and security configuration
Each event includes the actor, timestamp, IP address, resource affected, and a structured payload describing the change.

​
Supported destinations

Prowork can stream events to any destination that accepts a webhook or standard log-shipping protocol. Common targets include:
  • Splunk
  • Datadog
  • Sumo Logic
  • Amazon S3 (for archival or ingestion via your own pipeline)
  • Any HTTPS endpoint your security team operates

​
Setting it up

  1. Contact your account manager to enable audit log streaming on your organization.
  2. Share the destination type and connection details (endpoint URL, auth header, or bucket info) with the Prowork team.
  3. Prowork provisions the stream and runs a test event to confirm delivery.
  4. Once you’ve confirmed events are landing in your SIEM, the stream begins delivering live events.
Last modified on August 28, 2026