Error data connector Github audit logs

Bogdan Stoica 10

Hi everyone. I am trying to make the connection between github and sentinel. I am trying to have the GitHub Enterprise Audit Log connector up, but somehow when I put the name of the Organization and the API key I got an error " Forbidden - Non-TransientException FlurlHttpException exception" . I mention that the API was created from a service account and it is a classic API with all the permissions. Has anyone encountered this ?

Thanks,

Bogdan

Shweta Mathur 27,786 Reputation points Microsoft Employee

2023-04-03T06:12:33.3566667+00:00

Hi @Bogdan Stoica ,

Thanks for reaching out.

To integrate with GitHub Enterprise Audit Log, could you please confirm that your GitHub API personal token Key has 'admin:org' scope?

Thanks,

Shweta
Miraf Alemu 0 Reputation points

2023-04-03T18:35:37.66+00:00

I'm having the same issues. yes, it does have the admin scope.
Fiona Matu 81 Reputation points Microsoft Employee

2024-02-26T22:15:24.37+00:00

Hi Miraf,

are you still experiencing this issue? Just to offer further troubleshooting tips, is there a possibility that the token was created by a user who is not a member of the organization? If so, the token will not be able to access the organization's data.