Webex Calling user activities through Webex API

[pravin.muthu@vads.com]

Hi, any idea how to integrate Webex API with SIEM server?  based on security policy need to push user sign-ins and sign-outs from control hub (for Webex calling) to our SIEM server. I would like to know how can retrieve user sign-ins and sign-outs through the public API for Webex calling

[dtibbe]

Events/Webhooks that are fired by the API are listed at https://developer.webex.com/docs/api/guides/webhooks

Sign ins or to Webex or such are not available. In addition, for Calling it might be also quite difficult: what if there is a MPP, it would be always logged on..

[pravin.muthu@vads.com]

I guess the Webex API can be used to integrate with SIEM servers. This involves pushing user sign-in and sign-out events from the Webex Control Hub to the SIEM system for analysis and monitoring. I would like to explore if there is any documentation for this steps log forwarding from control hub to SIEM server

[sandiban]

Hi pravin.muthu@vads.com,
Unfortunately we don't have the API at this moment to read the Users' sign-in and sign-out status from SIEM server.
But if you need the specifically sign-in and sign-out data only for the Users in your Org, then you can give it a try to this Security Events REST API - https://developer.webex.com/docs/api/v1/security-audit-events

But to be able to access this API, you should have the Admin role in your Org and the API token should have "audit:events_read" scope added, as documented in the API details page as well.

Please let us know for any further assistance.

Kind regards!
Sandip

[pravin.muthu@vads.com]

Yes, we need the specifically sign-in and sign-out data only for the Users in our  Org push the user access activity to our SIEM server from Webex Control hub. Thank you let me try check