Realm.Security Documentation

Appearance

Linear Audit Logs Integration ​


Linear Audit Logs Architecture

Send Linear Audit Logs to Realm ​

This guide walks you through connecting Linear audit logs to Realm. The integration uses a webhook push — Linear sends audit log events to a webhook input feed exposed by Realm, which then forwards them through your data pipeline to your configured destination.

Note: Linear generates the webhook signing secret and does not let you set your own. Because of this, setup runs in three phases: create the webhook in Linear to obtain the secret, create the Realm input feed using that secret, then update the Linear webhook with the URL Realm generates.

Prerequisites ​

  • A Linear workspace admin account with permission to create webhooks.
  • Access to the Realm Security console.
  • A publicly trusted TLS certificate on the Realm input feed (set to Public in the steps below). Linear will not deliver to endpoints with self-signed or private certificates.

1. Linear: Create the Webhook ​

  1. Log in to Linear as a workspace admin.
  2. Navigate to Settings > API > Webhooks and click New webhook.
  3. Enter a placeholder URL (for example, https://example.com). You will replace this with the Realm URL in step 3.
  4. Select the audit log events you want to send, then click Create webhook.
  5. Copy the Signing secret displayed for the webhook.

Important: Copy and save the signing secret now. You will need it to create the Realm input feed.

2. Realm: Create the Input Feed ​

  1. Log in to the Realm Security console.

  2. Create a new Source for Linear:

    Name: Linear Audit Logs
    Format: Linear Audit Logs

  3. Add a new Input Feed to the source:

    Type: Cloud HTTP
    Authentication Method: HMAC
    Webhook Secret: <signing secret from Linear>
    HMAC Signature Header: Linear-Signature
    TLS Issuer: Public

  4. Save the input feed and copy the URL that Realm generates.

3. Linear: Update the Webhook URL ​

  1. In Linear, return to Settings > API > Webhooks and open the webhook you created.
  2. Replace the placeholder URL with the Realm input feed URL.
  3. Click Save.

Once saved, Linear will begin pushing audit log events to Realm.

Troubleshooting ​

If events are not arriving in Realm:

  1. Confirm the webhook URL in Linear exactly matches the URL shown for the input feed in Realm.
  2. Confirm the Signature Header is set to Linear-Signature and the secret matches the Linear signing secret. Requests that fail HMAC validation are rejected.
  3. Confirm the input feed's TLS certificate is set to Public.