Skip to main content

Digital Guardian Integration

Requirements

You Must Have

Why You Need It

Elastic Agent installed

So Elastic can pull data from DG

Access to Digital Guardian (ARC and DGMC)

That’s where you get the info Elastic needs

STEP 1: Get the Info from Digital Guardian

You will need to collect 5 things. Just follow this one by one:

Get the Client ID

Where to find it:

  • Go to Digital Guardian ARC

  • Log in

  • Click on Tenant Settings

  • Look for Tenant ID

  • Copy this and save it somewhere. This is your Client ID

Get the Authentication Token or Client Secret

Still in Tenant Settings

  • Look for Authentication Token

  • Copy it — this is your secret key

  • This helps Elastic talk to Digital Guardian safely

 

Get the ARC Server URL

Now go to the Digital Guardian Management Console (DGMC)

  • Log in

  • Find the Access Gateway Base URL

  • Copy it. This is the website Elastic will connect to get the data

Get the Authorization Server URL

Still in DGMC

  • Look for something called Authorization Server URL

  • Copy that too

Get the Export Profile ID

Go back to ARC

  • Click on Admin > Reports > Export Profiles

  • Find your Export Profile

  • You’ll see something like this: export-profile:guid:abc-123-xyz

  • Copy only the middle part (example: just abc-123-xyz)

STEP 2: Go to Elastic (Kibana)

  1. Open Kibana (Elastic’s dashboard)

  2. Click Add Integration

  3. Search for Digital Guardian

  4. Click it, then click Add Digital Guardian

STEP 3: Paste the Info You Got

Now you’ll see a form. Paste everything you got:

Field

Paste This

Client ID

Paste the Tenant ID

Client Secret

Paste the Authentication Token

ARC Server URL

Paste the Access Gateway URL

Authorization Server URL

Paste that

Export Profile ID

Paste only the GUID (example: abc-123-xyz)

Click Save when done

STEP 4: View the Data in Elastic

  1. In Kibana, go to Discover or Dashboards

  2. Search for digital_guardian.arc

  3. You’ll now see logs and alerts from Digital Guardian

Notes:

  • If you don’t see data right away, give it a few minutes.

  • Make sure your API info (Client ID, Secret, URLs) are correct



No Comments
Back to top