Hex Log Monitoring

Integration Overview

Hex is a collaborative data analytics platform used by data and analytics teams to build and share notebooks, dashboards, and data apps. Hex audit logs capture user and system activity across your workspace, including project access, data exports, cell executions, and administrative changes. Panther ingests these events in real time via webhook, normalizing and storing them in a Snowflake-powered security data lake for detection, investigation, and compliance auditing.

Use Cases for Hex Logs

Common SIEM use cases for Hex logs include:

• Monitoring data exports and project access for unauthorized or anomalous activity

• Tracking administrative actions and workspace configuration changes

• Auditing user activity across your analytics environment for compliance requirements

Onboarding Hex Logs in Panther

Panther's integration for Hex is easy to configure, allowing you to onboard your log data in just a few minutes. Hex audit logs are streamed to Panther in real time via a generic HTTPS webhook using shared secret authentication. Workspace admin access is required to configure the log stream in Hex.

For more detailed steps on onboarding Hex or for supported log schema, you can view our Hex documentation here.