Introduction
The tags beginning with gateway.okta identify events generated by Okta Access Gateway logs.
Valid tags and data tables
The full tag must have four levels. The first three are fixed as gateway.okta.oag. The fourth level indicates the event subtype.
Technology | Brand | Type | Subtype |
|---|---|---|---|
gateway | okta | oag |
|
These are the valid tags and corresponding data tables that will receive the parsers' data:
Tag | Data table |
|---|---|
gateway.okta.oag.access | gateway.okta.oag.access |
gateway.okta.oag.audit | gateway.okta.oag.audit |
gateway.okta.oag.monitor | gateway.okta.oag.monitor |
How is the data sent to Devo?
Logs generated by okta must be sent to the Devo platform via the Devo Relay to secure communication. See the required relay rules below: