# Duo Security

Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fintegrations%2Fsecurity%2Fduo-security.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fintegrations%2Fsecurity%2Fduo-security.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

This tutorial demonstrates how to seamlessly send your [Duo Security](https://duo.com/) authentication and administrative logs to Coralogix.

## Prerequisites[​](#prerequisites "Direct link to Prerequisites")

* Duo Security [account](https://signup.duo.com/?_gl=1*cmrv23*_gcl_au*ODg0ODIxNTAwLjE2ODc4NTg4ODE.#eyJoYXNoIjoiIiwic2VhcmNoIjoiP19nbD0xKmNtcnYyMypfZ2NsX2F1Kk9EZzBPREl4TlRBd0xqRTJPRGM0TlRnNE9ERS4ifQ==)

* Server capable of fetching data from Duo Security (e.g. EC2, VM Instance, etc.)

## Admin API Setup[​](#admin-api-setup "Direct link to Admin API Setup")

Add the Duo Security Admin API to your Duo instance.

**STEP 1**. Log in to the Duo Security [admin portal](https://admin.duosecurity.com), the storage place for your authentication and administrative logs.

**STEP 2**. Click on **Applications** > Protect an Application.

**STEP 3**. Select the Admin API.

[![](/assets/images/1-2-1024x400-7fc4c7829da150997a2bfdb2f2cb18ee.webp)](https://docs-docusaurus.kinsta.page/assets/images/1-2-1024x400-7fc4c7829da150997a2bfdb2f2cb18ee.webp)

**STEP 4**. Once the Duo Admin API application is created, copy the host name and key values to use in the Duo Security log sync configuration. Use the integration key (**ikey**), secret key (**skey**), and API hostname (**hostname**) values here to populate the configuration script.

[![](/assets/images/2-2-1024x509-06395bd4d94d5b38a6cf51d28029b8d3.webp)](https://docs-docusaurus.kinsta.page/assets/images/2-2-1024x509-06395bd4d94d5b38a6cf51d28029b8d3.webp)

## Log Sync Setup & Configuration[​](#log-sync-setup--configuration "Direct link to Log Sync Setup & Configuration")

Full instructions for this section can be found [here](https://github.com/duosecurity/duo_log_sync/blob/master/README.md).

**STEP 1**. [Install](http://python.org/downloads/) Python3 on the server if you haven't already done so.

**STEP 2**. Clone the [duo\_log\_sync repo](https://github.com/duosecurity/duo_log_sync).

**STEP 3**. Create a temp directory at `c:\temp` to store your log files.

* Those using **Linux** operating systems will already have a `/tmp` directory that can be used.

**STEP 4**. Create a file called `config.yml` inside `...\duologsync\config.yml`.

* Those using **Windows** operating systems will need to escape the directory references and put the full path, as in the example below.

* Input the **skey**, **ikey**, and **hostname** values from your Admin API application.

**Linux config.yml file**:

```
duoclient:

  skey: "ENTER-SECRET-KEY-HERE"

  ikey: "ENTER-INTEGRATION-KEY-HERE"

  host: "ENTER-API-HOSTNAME-HERE"



logs:

  logDir: "/tmp"

  endpoints:

    enabled: ["auth", "telephony", "adminaction"]

  polling:

    duration: 5

    daysinpast: 1

  checkpointDir: "/tmp"



transport:

  protocol: "TCP"

  host: "localhost"

  port: 8877

  certFileDir: "/tmp"

  certFileName: "selfsigned.cert"



recoverFromCheckpoint:

  enabled: FalseWindows config.yml
```

**STEP 5**. Save the file.

**STEP 6**. [Create a self-signed certificate](https://devopscube.com/create-self-signed-certificates-openssl/) and place it in the `tmp` directory.

**STEP 7**. Inside the `duo_log_sync` directory use the command-line to type:

```
python3 setup.py install
```

**STEP 8**. Once the application is running, deploy the [Fluentd log shipper](https://docs-docusaurus.kinsta.page/integrations/files/fluentd/.md) to intercept the traffic. Send your logs to Coralogix on port **8877**.

## Additional Resources[​](#additional-resources "Direct link to Additional Resources")

|               |                                                                                |
| ------------- | ------------------------------------------------------------------------------ |
| Documentation | [Fluentd](https://docs-docusaurus.kinsta.page/integrations/files/fluentd/.md)  |
| External      | [Duo Security GitHub Repository](https://github.com/duosecurity/duo_log_sync/) |