Dashboard: Audit Log Activity Dashboard
This dashboard answers the following questions:
- What is the total number of events?
- How many events are generated per organization?
- Which repositories have the most events?
- Who are the top actors (excluding bots)?
- What are the top source IPs?
- What are the most frequently occurring actions?
- Which repositories have had the highest number of secret scanning alerts created?
This dashboard contains 1 card.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/tailpipe-mod-github-audit-log-detections
Start the Powerpipe server:
powerpipe server
Open http://localhost:9033 in your browser and select Audit Log Activity Dashboard dashboard.
You could also snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe dashboard run github_audit_log_detections.dashboard.activity_dashboard --share
Queries
This dashboard uses the the following queries:
select action as "Action", count(*) as "Events"from github_audit_loggroup by actionorder by count(*) desclimit 10;