---
title: Imperva
description: Imperva audit trails
breadcrumbs: Docs > Integrations > Imperva
---

# Imperva
Integration version1.0.0Imperva Dashboard
## Overview{% #overview %}

Imperva provides network and application security solutions to protect applications and APIs from attacks and monitor incidents. It also acts as a global Content Delivery Network (CDN) to cache pages and reduce bandwidth usage.

Datadog's integration with Imperva collects logs and metrics from Imperva's [Attack Analytics API](https://docs-cybersec.thalesgroup.com/bundle/api-docs/page/attack-analytics-api-overview.htm), [Audit Trail API](https://docs-cybersec.thalesgroup.com/bundle/cloud-application-security/page/audit-trail.htm), and [Traffic Statistics API](https://docs-cybersec.thalesgroup.com/bundle/api-docs/page/traffic-stats-api-definition.htm?operationId=operations-Traffic_Statistics_and_Logs-getStats), which generate:

**Attack Analytics Logs** These logs represent incidents of cyberattacks against your account, providing a comprehensive view of attacks and attackers targeting your resources. They are formed by aggregating and analyzing security alerts, then grouping them into security incidents.

**Audit Trail Logs** These logs contain actions performed in your account by account users, system processes, and Imperva system administrators and support.

## Setup{% #setup %}

### Installation{% #installation %}

**Step 1: Get your Imperva API Key and API ID**

1. Log in to your Imperva account at [https://management.service.imperva.com/](https://management.service.imperva.com/) then click **Account / My Profile**
1. At the bottom of the page, click **Add API key** and follow the instructions.
1. After creating the API key, copy and save the **API Key** and **API ID** values.
1. Make sure the **Status** field for your API key is set to **Enabled**.

**Step 2: Get your Imperva Account ID**

1. In the Imperva console, choose the account to monitor.
1. Click the **Account** button and copy the ID listed for the current account. This is the number in parentheses after the account name.

**Step 3: Create the Datadog Integration**

1. Paste the Account ID, API ID and API Key into the fields below.
1. Enter a name for the account.

**Step 4 (Optional): Add Site IDs**

To retrieve more granular per-site metrics, add Site IDs to your account.

1. Retrieve the Site ID from the Imperva management console.
1. Paste the Site ID and Site URL into the fields below.
1. The Site ID and URL will be used to tag the Imperva metrics so that they can be filtered by site in Datadog.

### Configuration{% #configuration %}

**Datadog IP Access**

If your Imperva account has IP address access restrictions, add the necessary Datadog IP address ranges to the allow list on Imperva.

1. In the Imperva management console, click the **Account** button and click **Account Management**.
1. Click **Account Settings**.
1. If there are entries in the **Allow access from the following IP addresses only** box, add the **webhooks** IP ranges from [Datadog IP ranges](https://docs.datadoghq.com/api/latest/ip-ranges.md).

### Validation{% #validation %}

Once the integration is installed, your Imperva logs will be available for query within Datadog logs using `source:imperva`. Cloud Application Security Stats metrics will be available with the prefix `imperva.`.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **imperva.visits\_human**(count)               | Human visits*Shown as event*                  |
| **imperva.visits\_bot**(count)                 | Bot visits*Shown as event*                    |
| **imperva.hits\_human**(count)                 | Human requests*Shown as request*              |
| **imperva.hits\_human\_per\_second**(rate)     | Human requests per second*Shown as request*   |
| **imperva.hits\_bot**(count)                   | Bot requests*Shown as request*                |
| **imperva.hits\_bot\_per\_second**(rate)       | Bot requests per second*Shown as request*     |
| **imperva.hits\_blocked**(count)               | Blocked requests*Shown as request*            |
| **imperva.hits\_blocked\_per\_second**(rate)   | Blocked requests per second*Shown as request* |
| **imperva.caching\_hits\_standard**(count)     | Standard Requests Caching*Shown as request*   |
| **imperva.caching\_bytes\_standard**(count)    | Standard Bandwidth Caching*Shown as byte*     |
| **imperva.caching\_hits\_advanced**(count)     | Advanced Requests Caching*Shown as request*   |
| **imperva.caching\_bytes\_advanced**(count)    | Advanced Bandwidth Caching*Shown as byte*     |
| **imperva.caching\_hits\_total**(count)        | Total Requests Caching*Shown as request*      |
| **imperva.caching\_bytes\_total**(count)       | Total Bandwidth Caching*Shown as byte*        |
| **imperva.bandwidth\_bandwidth**(count)        | Bandwidth*Shown as byte*                      |
| **imperva.bandwidth\_bits\_per\_second**(rate) | Bits per second*Shown as bit*                 |
| **imperva.incapsula\_rule\_incidents**(count)  | Incapsula Rule Incidents*Shown as event*      |

### Service Checks{% #service-checks %}

Imperva does not include any service checks.

### Events{% #events %}

Imperva does not include any events.

### Logs{% #logs %}

Datadog's integration with Imperva collects logs and metrics from Imperva's API, which generates:

- Attack Analytics Logs: Aggregated security alerts grouped into incidents, providing a comprehensive view of cyberattacks targeting your account.

- Audit Trail Logs: Actions performed by account users, system processes, and Imperva administrators and support.

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).