What GitHub feature allows you to stream audit log events to external systems in real time?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Audit Log Streaming pushes events to your external SIEM or storage as they happen — no polling, no gaps. Hook it up to Splunk, Datadog, or an S3 bucket and you've got a real-time compliance feed that outlasts GitHub's 180-day retention.
Full explanation below image
Full Explanation
GitHub Audit Log Streaming is an enterprise feature that forwards audit log events to external systems in real time as they occur. Supported streaming destinations include: Amazon S3, Azure Blob Storage, Google Cloud Storage, Datadog, and Splunk. This enables: (1) Long-term retention beyond GitHub's 180-day default, (2) Integration with existing SIEM and security monitoring workflows, (3) Cross-enterprise audit log aggregation, (4) Compliance with regulatory requirements for log retention. Webhooks deliver repository/organization events but are not designed for audit log streaming. The REST API audit log endpoint allows polling but is not real-time streaming. GitHub Actions logs are job execution logs, not organizational audit events.