Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,248 questions
Error data connector Github audit logs
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 4%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Bogdan Stoica
10
Reputation points
Hi everyone. I am trying to make the connection between github and sentinel. I am trying to have the GitHub Enterprise Audit Log connector up, but somehow when I put the name of the Organization and the API key I got an error " Forbidden - Non-TransientException FlurlHttpException exception" . I mention that the API was created from a service account and it is a classic API with all the permissions. Has anyone encountered this ?
Thanks,
Bogdan
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 20%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Shweta Mathur 30,266 Reputation points Microsoft Employee2023-04-03T06:12:33.3566667+00:00 Hi @Bogdan Stoica ,
Thanks for reaching out.
To integrate with GitHub Enterprise Audit Log, could you please confirm that your GitHub API personal token Key has 'admin:org' scope?
Thanks,
Shweta
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 41%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Miraf Alemu 0 Reputation points2023-04-03T18:35:37.66+00:00 I'm having the same issues. yes, it does have the admin scope.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 9%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFM%3C/text%3E%3C/svg%3E)
Fiona Matu 91 Reputation points Microsoft Employee2024-02-26T22:15:24.37+00:00 Hi Miraf,
are you still experiencing this issue? Just to offer further troubleshooting tips, is there a possibility that the token was created by a user who is not a member of the organization? If so, the token will not be able to access the organization's data.
Sign in to comment
Sign in to answer