Skip to content
Tessera Tessera Docs

Export to your SIEM

Availability Ultimate · Enterprise.

Tessera keeps a complete audit log in Postgres and can additionally stream every event to an external collector in real time. Configure it under Settings → Integrations → Audit export.

Set up

Section titled “Set up”
  1. Toggle Export enabled.
  2. Enter your collector’s webhook URL — any HTTP endpoint that accepts a JSON POST (Elastic, a log shipper, or Splunk HEC behind a collector/proxy).
  3. Optionally add a bearer token, sent as Authorization: Bearer <token>.
  4. Click Send test to deliver a sample event.

Delivery model

Section titled “Delivery model”
  • Events are POSTed as JSON, one per event, as they happen.
  • Delivery is best-effort and asynchronous — it never blocks a user action, and the full log always remains in the database as the source of truth.

What’s in the stream

Section titled “What’s in the stream”

Every audit event: logins, connects, per-command / query / API-request activity, access requests and approvals, settings changes, and lifecycle events (user disabled, sessions revoked) — the material SOC pipelines and compliance reviewers consume.

Cookies