Zendesk

The Zendesk Source works by polling your event/alert logs every 60 seconds using the API token authentication method.

Setup

To connect your source, generate an API Token from your Zendesk settings tab. Make sure Token Access is enabled and create a new token.

Provide the token, as well as the email address of your Zendesk Support administrator to RunReveal while creating the source.

Click verify source prior to connecting your source in RunReveal, which may take a moment, but if successful will ensure that the source is correctly configured.

Verify It's Working

Once added the source logs should begin flowing within a minute.

You can validate we are receiving your logs by running the following SQL query.

SELECT * FROM runreveal.logs WHERE sourceType = 'zendesk' LIMIT 1

Schema

The following columns are exposed for this source. RunReveal applies schema normalization across all sources, ensuring uniform field names and data types for cross-source queries and reusable detection logic.