# Configure audit webhook using the GUI

The audit webhook sends S3 APIs audit events to a remote system (for example, Splunk). These events provide a better understanding of the traffic nature.

When creating an S3 cluster, the audit webhook is default enabled but not configured.

**Before you begin**

[#create-an-s3-cluster](https://docs.weka.io/4.2/additional-protocols/s3-cluster-management/s3-cluster-management#create-an-s3-cluster "mention")

**Procedure**

1. From the menu, select **Manage > Protocols**.
2. From the Protocols pane, select **S3**.
3. On the S3 Cluster Configuration, select the **Configure audit webhook** icon.

<figure><img src="https://1970823310-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNqDzxyFrTFrLD641p0iH%2Fuploads%2FJxciueyFlTGEHrScrwOt%2Fwmng_audit_webhook_button.png?alt=media&#x26;token=8d895629-5815-4e83-9789-1651e9df35c2" alt=""><figcaption><p><strong>Configure audit webhook</strong></p></figcaption></figure>

4. On the Audit Webhook Configuration dialog, set the following:
   * **Endpoint:** The webhook endpoint URL that receives the events stream.
   * **Auth Token:** The webhook authentication token.
5. Select **Save**.

<figure><img src="https://1970823310-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNqDzxyFrTFrLD641p0iH%2Fuploads%2FuUMBwGbmCzHxxkVCXhos%2Fwmng_audit_webhook_configuration.png?alt=media&#x26;token=e79dc03d-51cc-4003-af56-f657966098ac" alt=""><figcaption><p>Audit Webhook Configuration</p></figcaption></figure>