Previous

Next

Box - Events Overview

Box - Shield Insights

Box - Files and Folders Insights

Box - Users and Access Management Insights

Overview

Box is a cloud-based file storage and collaboration platform that allows users to securely share, manage, and access files from anywhere.

This integration ingests Enterprise Events detailed logs, which includes user actions, admin activities, and Shield events from a Box enterprise instance.

Note: Box Shield must be enabled on your Box Enterprise account to access security insights and threat detection data.

This integration gathers enterprise events and forwards them to Datadog for seamless analysis. Datadog leverages its built-in log pipelines to parse and enrich these logs, facilitating easy search and detailed insights. With preconfigured dashboards, the integration offers clear visibility into activities within the Box platform. Additionally, it includes ready-to-use Cloud SIEM detection rules for enhanced monitoring and security.

Setup

Prerequisites

• This integration requires a Box Business or higher plan.

Generate API Credentials in Box

1. Log in to Box and go to the Developer Console.
2. Select Create Platform App, choose Custom App, enter the required app info, and then click Next.
3. Select Server Authentication (with Client Credentials Grant) as the authentication method, and then click Create App.
4. Go to the Configuration tab, select App + Enterprise Access under App Access Level, check Generate user access tokens under Advanced Features, and then click Save Changes.
5. In the Authorization tab, click Review and Submit, enter a brief app description, and then click Submit.
6. Get the Enterprise ID from the General tab, and the Client ID and Client Secret from the Configuration tab.
7. Navigate to the Platform Apps Manager in the Admin Console.
8. Locate your app under Server Authentication Apps, click ... (More), and select Authorize App. When prompted, click Authorize to confirm.

Connect your Box Account to Datadog

1. Add your Enterprise ID, Client ID and Client Secret.

   Parameters	Description
   Enterprise ID	The Enterprise ID of your organization in the Box platform.
   Client ID	The Client ID of your organization in the Box platform.
   Client Secret	The Client Secret of your organization in the Box platform.

2. Click the Save button to save your settings.

Note: Monthly API call limits are listed on the Box Pricing Page. To purchase additional capacity, contact Box Support.

Data Collected

Logs

The Box integration collects and forwards enterprise events to Datadog. For more information about the logs collected by this integration, see the Box Enterprise Events API Docs.

Metrics

The Box integration does not include any metrics.

Events

The Box integration does not include any events.

Support

For any further assistance, contact Datadog support.