Skip to main content
Panther Knowledge Base

How do I ingest IP addresses from GitHub Audit Logs into Panther?

QUESTION

 How do I ingest IP addresses in the GitHub audit log into Panther?

ANSWER

If you are ingesting GitHub logs into Panther via the GitHub API (at the organization level), you can configure GitHub to display the source IP for events in your audit logs by following these instructions on GitHub's documentation.

If you are ingesting GitHub logs into Panther via GitHub audit log streaming (at the enterprise level), you can configure GitHub to display the source IP for events in your audit logs by following these instructions on GitHub's documentation.