Get user events for security monitoring

[Tester123]

Hello,

Has anyone worked on getting the user events to an external system/file for security monitoring? If so, can you help me with it ? My objective is to get the user events like logouts/logins etc to a file so it can then be read by our software running in the system.

Thanks for the help!

[xgp]

1. There is a built in event listener that logs events to the log file. It can be enabled in the “Realm Settings → Events” tab by adding jboss-logging to the event listeners.
   
2. You can also implement your own EventListenerProvider to capture and do whatever you want with the events. Docs and examples here:
   • Server Developer Guide
   • keycloak-quickstarts/extension/event-listener-sysout at main · keycloak/keycloak-quickstarts · GitHub
3. I’ve got a few extensions for externalizing events via HTTP and webhooks. Repo here:
   • GitHub - p2-inc/keycloak-events: Useful Keycloak event listener implementations and utilities.