All user and administrative activity is captured in the SailPoint solution audit logs and we were looking to send events to our Elastic SIEM to create alerts and react to any potential issues. Another use case is related to our CAM instances. We have failed API calls against some of our environments but not sure if it’s perhaps a misconfiguration or something more - we are looking for more visibility into these types of events as well if available. Webhooks are supported.