> ## Documentation Index
> Fetch the complete documentation index at: https://launchdarkly.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Integration audit log subscriptions

<View title="Developer" />

<View title="Federal docs" />

<View title="EU docs" />

Audit log integration subscriptions allow you to send audit log events hooks to one of dozens of external tools. For example, you can send flag change event webhooks to external third party software. To learn more, read [Using the LaunchDarkly integration framework](/docs/integrations/building-integrations).

You can use the integration subscriptions API to create, delete, and manage your integration audit log subscriptions.

Each of these operations requires an `integrationKey` that refers to the type of integration. The required `config` fields to create a subscription vary depending on the `integrationKey`. You can find a full list of the fields for each integration below.

Several of these operations require a subscription ID. The subscription ID is returned as part of the [Create audit log subscription](/docs/api/integration-audit-log-subscriptions/create-audit-log-subscription) and [Get audit log subscriptions by integration](/docs/api/integration-audit-log-subscriptions/get-audit-log-subscriptions-by-integration) responses. It is the `_id` field, or the `_id` field of each element in the `items` array.

### Configuration bodies by integrationKey

#### datadog

`apiKey` is a sensitive value.

`hostURL` must evaluate to either `"https://api.datadoghq.com"` or `"https://api.datadoghq.eu"` and will default to the former if not explicitly defined.

```lines wrap theme={null}
"config": {
    "apiKey": <string, optional>, # sensitive value
    "hostURL": <string, optional>
}
```

#### dynatrace

`apiToken` is a sensitive value.

`entity` must evaluate to one of the following fields and will default to `"APPLICATION"` if not explicitly defined:

<details>
  <summary>Click to expand list of fields</summary>

  <br />

  "APPLICATION"<br />
  "APPLICATION\_METHOD"<br />
  "APPLICATION\_METHOD\_GROUP"<br />
  "AUTO\_SCALING\_GROUP"<br />
  "AUXILIARY\_SYNTHETIC\_TEST"<br />
  "AWS\_APPLICATION\_LOAD\_BALANCER"<br />
  "AWS\_AVAILABILITY\_ZONE"<br />
  "AWS\_CREDENTIALS"<br />
  "AWS\_LAMBDA\_FUNCTION"<br />
  "AWS\_NETWORK\_LOAD\_BALANCER"<br />
  "AZURE\_API\_MANAGEMENT\_SERVICE"<br />
  "AZURE\_APPLICATION\_GATEWAY"<br />
  "AZURE\_COSMOS\_DB"<br />
  "AZURE\_CREDENTIALS"<br />
  "AZURE\_EVENT\_HUB"<br />
  "AZURE\_EVENT\_HUB\_NAMESPACE"<br />
  "AZURE\_FUNCTION\_APP"<br />
  "AZURE\_IOT\_HUB"<br />
  "AZURE\_LOAD\_BALANCER"<br />
  "AZURE\_MGMT\_GROUP"<br />
  "AZURE\_REDIS\_CACHE"<br />
  "AZURE\_REGION"<br />
  "AZURE\_SERVICE\_BUS\_NAMESPACE"<br />
  "AZURE\_SERVICE\_BUS\_QUEUE"<br />
  "AZURE\_SERVICE\_BUS\_TOPIC"<br />
  "AZURE\_SQL\_DATABASE"<br />
  "AZURE\_SQL\_ELASTIC\_POOL"<br />
  "AZURE\_SQL\_SERVER"<br />
  "AZURE\_STORAGE\_ACCOUNT"<br />
  "AZURE\_SUBSCRIPTION"<br />
  "AZURE\_TENANT"<br />
  "AZURE\_VM"<br />
  "AZURE\_VM\_SCALE\_SET"<br />
  "AZURE\_WEB\_APP"<br />
  "CF\_APPLICATION"<br />
  "CF\_FOUNDATION"<br />
  "CINDER\_VOLUME"<br />
  "CLOUD\_APPLICATION"<br />
  "CLOUD\_APPLICATION\_INSTANCE"<br />
  "CLOUD\_APPLICATION\_NAMESPACE"<br />
  "CONTAINER\_GROUP"<br />
  "CONTAINER\_GROUP\_INSTANCE"<br />
  "CUSTOM\_APPLICATION"<br />
  "CUSTOM\_DEVICE"<br />
  "CUSTOM\_DEVICE\_GROUP"<br />
  "DCRUM\_APPLICATION"<br />
  "DCRUM\_SERVICE"<br />
  "DCRUM\_SERVICE\_INSTANCE"<br />
  "DEVICE\_APPLICATION\_METHOD"<br />
  "DISK"<br />
  "DOCKER\_CONTAINER\_GROUP\_INSTANCE"<br />
  "DYNAMO\_DB\_TABLE"<br />
  "EBS\_VOLUME"<br />
  "EC2\_INSTANCE"<br />
  "ELASTIC\_LOAD\_BALANCER"<br />
  "ENVIRONMENT"<br />
  "EXTERNAL\_SYNTHETIC\_TEST\_STEP"<br />
  "GCP\_ZONE"<br />
  "GEOLOCATION"<br />
  "GEOLOC\_SITE"<br />
  "GOOGLE\_COMPUTE\_ENGINE"<br />
  "HOST"<br />
  "HOST\_GROUP"<br />
  "HTTP\_CHECK"<br />
  "HTTP\_CHECK\_STEP"<br />
  "HYPERVISOR"<br />
  "KUBERNETES\_CLUSTER"<br />
  "KUBERNETES\_NODE"<br />
  "MOBILE\_APPLICATION"<br />
  "NETWORK\_INTERFACE"<br />
  "NEUTRON\_SUBNET"<br />
  "OPENSTACK\_PROJECT"<br />
  "OPENSTACK\_REGION"<br />
  "OPENSTACK\_VM"<br />
  "OS"<br />
  "PROCESS\_GROUP"<br />
  "PROCESS\_GROUP\_INSTANCE"<br />
  "RELATIONAL\_DATABASE\_SERVICE"<br />
  "SERVICE"<br />
  "SERVICE\_INSTANCE"<br />
  "SERVICE\_METHOD"<br />
  "SERVICE\_METHOD\_GROUP"<br />
  "SWIFT\_CONTAINER"<br />
  "SYNTHETIC\_LOCATION"<br />
  "SYNTHETIC\_TEST"<br />
  "SYNTHETIC\_TEST\_STEP"<br />
  "VIRTUALMACHINE"<br />
  "VMWARE\_DATACENTER"
</details>

```lines wrap theme={null}
"config": {
    "apiToken": <string, required>,
    "url": <string, required>,
    "entity": <string, optional>
}
```

#### elastic

`token` is a sensitive field.

```lines wrap theme={null}
"config": {
    "url": <string, required>,
    "token": <string, required>,
    "index": <string, required>
}
```

#### honeycomb

`apiKey` is a sensitive field.

```lines wrap theme={null}
"config": {
    "datasetName": <string, required>,
    "apiKey": <string, required>
}
```

#### logdna

`ingestionKey` is a sensitive field.

```lines wrap theme={null}
"config": {
    "ingestionKey": <string, required>,
    "level": <string, optional>
}
```

#### msteams

```lines wrap theme={null}
"config": {
    "url": <string, required>
}
```

#### new-relic-apm

`apiKey` is a sensitive field.

`domain` must evaluate to either `"api.newrelic.com"` or `"api.eu.newrelic.com"` and will default to the former if not explicitly defined.

```lines wrap theme={null}
"config": {
    "apiKey": <string, required>,
    "applicationId": <string, required>,
    "domain": <string, optional>
}
```

#### signalfx

`accessToken` is a sensitive field.

```lines wrap theme={null}
"config": {
    "accessToken": <string, required>,
    "realm": <string, required>
}
```

#### splunk

`token` is a sensitive field.

```lines wrap theme={null}
"config": {
    "base-url": <string, required>,
    "token": <string, required>,
    "skip-ca-verification": <boolean, required>
}
```