Formal Security

Collect data access logs from Formal Security, including actor, network, and resource information for comprehensive visibility into data access patterns.

Formal Security supports multiple ingestion methods including S3, Azure Blob Storage, Google Cloud Storage, and Cloudflare R2.

Ingest Methods

Setup the ingestion of this source using one of the following guides.

AWS S3 Bucket
AWS S3 Bucket with Custom SQS
Azure Blob Storage
Google Cloud Storage
Cloudflare R2 Bucket

If using an AWS S3 bucket use the following SNS topic ARN to send your bucket notifications.

arn:aws:sns:<REGION>:253602268883:runreveal_formal_security

Setup

Formal Security logs can be ingested via object storage. Configure your Formal Security instance to export logs to one of the supported storage providers.

Verify It’s Working

Once added, the source logs should begin flowing within a few minutes.

You can validate we are receiving your logs by running the following SQL query.

SELECT * FROM runreveal.logs WHERE sourceType = 'formal-security' LIMIT 1

Fluent Bit GCP