topic Re: Webex Calling user activities through Webex API in Webex for Developers

Webex Calling user activities through Webex API

pravin.muthu@vads.com — Sat, 22 Feb 2025 12:37:06 GMT

Hi, any idea how to integrate Webex API with SIEM server? based on security policy need to push user sign-ins and sign-outs from control hub (for Webex calling) to our SIEM server. I would like to know how can retrieve user sign-ins and sign-outs through the public API for Webex calling

Re: Webex Calling user activities through Webex API

dtibbe — Sun, 23 Feb 2025 19:55:00 GMT

Events/Webhooks that are fired by the API are listed at https://developer.webex.com/docs/api/guides/webhooks

Sign ins or to Webex or such are not available. In addition, for Calling it might be also quite difficult: what if there is a MPP, it would be always logged on..

Re: Webex Calling user activities through Webex API

pravin.muthu@vads.com — Mon, 24 Feb 2025 02:22:58 GMT

I guess the Webex API can be used to integrate with SIEM servers. This involves pushing user sign-in and sign-out events from the Webex Control Hub to the SIEM system for analysis and monitoring. I would like to explore if there is any documentation for this steps log forwarding from control hub to SIEM server

Re: Webex Calling user activities through Webex API

sandiban — Mon, 24 Feb 2025 08:22:45 GMT

Hi pravin.muthu@vads.com,
Unfortunately we don't have the API at this moment to read the Users' sign-in and sign-out status from SIEM server.
But if you need the specifically sign-in and sign-out data only for the Users in your Org, then you can give it a try to this Security Events REST API - https://developer.webex.com/docs/api/v1/security-audit-events

But to be able to access this API, you should have the Admin role in your Org and the API token should have "audit:events_read" scope added, as documented in the API details page as well.

Please let us know for any further assistance.

Kind regards!
Sandip

Re: Webex Calling user activities through Webex API

pravin.muthu@vads.com — Tue, 25 Feb 2025 02:09:44 GMT

Yes, we need the specifically sign-in and sign-out data only for the Users in our Org push the user access activity to our SIEM server from Webex Control hub. Thank you let me try check