Application-level reporting configuration keys

Configuration keys for Elevate24 application-level reporting.

NOTE

Preference Domain: com.jigsaw24.Elevate24

---

Enable local logging

• Availability: Basic & Premium
• Type: Boolean
• Default: false

Enables local logging of Elevate24 application behaviour to /var/log/Elevate24.log.

<key>LocalLog</key>
<true/>

---

Disable sending data to Jigsaw24

• Availability: Premium
• Type: Boolean
• Default: false

When true, prevents Elevate24 from sending reporting data to the Jigsaw24 Portal.

<key>DisableDefaultLog</key>
<true/>

---

SIEM configuration

• Availability: Premium
• Type: String

Enables sending Elevate24 application usage logs to a third-party SIEM via HTTP.

<key>siemUrl</key>
<string>https://your-siem-endpoint.example.com/ingest</string>

<key>siemAuthToken</key>
<string>your-auth-token</string>

<key>siemAuthHeader</key>
<string>Authorization</string>

<key>siemHeaders</key>
<array>
	<dict>
		<key>Header</key>
		<string>Authorization</string>
		<key>Value</key>
		<string>Bearer your-token</string>
	</dict>
</array>

Parameters

Key	Type	Required	Description
siemUrl	String	Yes	The HTTP endpoint URL to send application logs to
siemAuthToken	String	No	Authentication token to include with each request
siemAuthHeader	String	No	The header name used to send the siemAuthToken, e.g. Authorization
siemHeaders	Array	No	Additional HTTP headers for SIEM providers that require more than one header. Each entry requires a Header name and a Value. Available in Elevate24 2.3.2 and later.

NOTE

siemAuthToken and siemAuthHeader work as a pair for single-header authentication. For providers requiring multiple custom headers, use siemHeaders instead.

---

Microsoft Sentinel

• Availability: Premium
• Type: String

Enables sending Elevate24 application logs to Microsoft Sentinel via the Logs Ingestion API.

<key>microsoftsentinel</key>
<array>
	<dict>
		<key>SentinelClientId</key>
		<string>Your-Client-ID</string>
		<key>SentinelTennantId</key>
		<string>Your-Tenant-ID</string>
		<key>SentinelClientsecret</key>
		<string>Your-Client-Secret</string>
		<key>SentinelUploadURL</key>
		<string>https://your-dce.ingest.monitor.azure.com/...</string>
	</dict>
</array>

Parameters

Key	Type	Description
SentinelClientId	String	The Application (client) ID of the Azure AD app registration
SentinelTennantId	String	The Directory (tenant) ID of your Azure AD tenant
SentinelClientsecret	String	The client secret generated for the Azure AD app registration
SentinelUploadURL	String	The Data Collection Rule endpoint URL for log ingestion

TIP

Refer to the Microsoft documentation for guidance on obtaining these values:

• Logs Ingestion API overview
• Tutorial: Send data to Azure Monitor Logs