Xygeni Sensor for GitLab
Last updated
Last updated
The Xygeni Sensor for GitLab monitors activity in an Organization (or User) and its repositories.
The sensor works by registering Audit Event Streaming for GitLab, which will send HTTPS messages to the streaming endpoint URL for the Xygeni platform.
See Audit event streaming examples for further information on the events and payloads sent from GitLab to Xygeni platform.
The Audit Event Streaming feature is only available in the Ultimate tier.
The streaming URL is https://api.xygeni.io/gitlab/streaming for the Xygeni cloud platform.
The streaming endpoint is secured with a shared secret and TLS, following the recommendations in Verify event authenticity.
Audit Event Streaming should be set for each top-level group you require to monitor using Xygeni. In case of Gitlab local self-managed instance it will be set once per instance.
In Gitlab, follow instruction to setup a streaming destination as describe at Add new HTTP destination
As Destination Name write a description for that streaming
Set the Destination URL (https://api.xygeni.io/gitlab/streaming).
Once the destination is created, expand the stream to locate the verification token.
Then copy the Verification Token, go to Xygeni 'Integrations Configuration' screen, and paste it at 'Verification token' field, 'Sensors' section".
You can navigate to the dashboard to keep track of the all the Unusual Activity detected at the moment, ordered by time of exposure from most recent to less recent. Open Anomalous Activity Summary.
