# Access History - Attribute filtering

**URL:** <https://developer.sailpoint.com/discuss/t/access-history-attribute-filtering/197228>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq, access-history\
**Created:** [February 25, 2026, 12:13am UTC](https://developer.sailpoint.com/discuss/t/access-history-attribute-filtering/197228 "2026-02-25T00:13:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![paul\_hilchey](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/paul_hilchey/32/24080_2.png) [@paul\_hilchey](https://developer.sailpoint.com/discuss/u/paul_hilchey)\
**Post date:** [February 25, 2026, 12:13am UTC](https://developer.sailpoint.com/discuss/t/access-history-attribute-filtering/197228/1 "2026-02-25T00:13:59Z")

</div>

After some effort, I’ve found out how to exclude attributes from the Access History change detection. It is done by editing the YAMLConfig - AccessHistoryTransformConfig object and setting a transform script for accounts. eg:

```auto
    account:
      includeHash: true
      hashProperty: smartHash
      objectClassName: sailpoint.object.Link
      imagePropertyConfigDescriptors:
        - property: id
        - property: application
        - property: nativeIdentity
        - property: uuid
        - property: iiqLocked
        - property: iiqDisabled
        - property: displayName
        - property: displayableName
        - property: attributes
          type: none
          propertyTransformerConfigDescriptors:
            - type: sailpoint.dataextract.conversion.LinkApplicationAccountSchemaTransformer
              args:
                excludedKeys: displayName,IIQLocked,IIQDisabled
                objectConfigTypes: system,standard,unclear
          transformScripts:
            - |
              Map atts = property.getValueMap();
              atts.remove("last_login_time");
              atts.remove("last_login");
              atts.remove("LASTLOGIN");
              atts.remove("LAST_LOGOUT_DATETIME");
              atts.remove("lastDirSyncTime");
              return property;
        - property: extendedAttributes
          type: none
          propertyTransformerConfigDescriptors:
            - type: sailpoint.dataextract.conversion.AttributesWithExclusions
              args:
                objectConfigTypes: extended
        - property: attributes
          newName: extendedAttributesNamed
          type: none
          propertyTransformerConfigDescriptors:
            - type: sailpoint.dataextract.conversion.AttributesWithExclusions
              args:
                objectConfigTypes: named
        - property: componentIds
        - property: identity
          type: object
          objectName: identityRef
        - property: instance
        - property: lastRefresh
          hashExclude: true
        - property: lastTargetAggregation
          hashExclude: true
        - property: manuallyCorrelated

```

In the transform script, you need to remove each of the account attributes that change frequently but are not important to track.

Note that after setting the transform script, the next account change may result in a new capture record as a filtered attribute value is being changed to null. Subsequent changes to a filtered attribute value should not result in a new capture.

---

<div class="post-metadata">

**Author:** ![neel193](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/neel193/32/34038_2.png) [@neel193](https://developer.sailpoint.com/discuss/u/neel193)\
**Post date:** [February 25, 2026, 4:09am UTC](https://developer.sailpoint.com/discuss/t/access-history-attribute-filtering/197228/2 "2026-02-25T04:09:59Z")

</div>

Thanks @paul_hilchey for sharing this. It is really useful.

---

<div class="post-metadata">

**Author:** ![paul\_hilchey](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/paul_hilchey/32/24080_2.png) [@paul\_hilchey](https://developer.sailpoint.com/discuss/u/paul_hilchey)\
**Post date:** [April 7, 2026, 5:19pm UTC](https://developer.sailpoint.com/discuss/t/access-history-attribute-filtering/197228/3 "2026-04-07T17:19:44Z")

</div>

Marking as solution to keep Codey happy.

---

<div class="post-metadata">

**Author:** ![paul\_hilchey](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/paul_hilchey/32/24080_2.png) [@paul\_hilchey](https://developer.sailpoint.com/discuss/u/paul_hilchey)\
**Post date:** [April 7, 2026, 5:51pm UTC](https://developer.sailpoint.com/discuss/t/access-history-attribute-filtering/197228/4 "2026-04-07T17:51:23Z")

</div>

On a related noted, I will mention that the Dispatch Access History task can use a lot of memory. A symptom of insufficient memory is the task taking a long time to complete. You can throw more memory at your jvm, or you can tune the task definition:

```auto
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE TaskDefinition PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<TaskDefinition name="Dispatch Access History" resultAction="Delete" subType="task_item_type_system" type="System">
  <Attributes>
    <Map>
      <entry key="configuration" value="AccessHistoryExtractConfig"/>
      <entry key="enableNamedTimestamp" value="true"/>
      <entry key="maxExtractPartitions" value="500"/>
      <entry key="maxObjectsPerExtractPartition" value="5000"/>
      <entry key="partitions" value="5"/>
      <entry key="taskCompletionEmailNotify" value="Disabled"/>
      <entry key="taskCompletionEmailRecipients"/>
      <entry key="taskCompletionEmailTemplate"/>
    </Map>
  </Attributes>
  <Description>Transforms IdentityIQ objects to create a JSON message, and dispatches it to the access history service.</Description>
  <Parent>
    <Reference class="sailpoint.object.TaskDefinition" name="Access History"/>
  </Parent>
</TaskDefinition>

```

This reduces the partition size to 5,000 objects, from the default 50,000, with a corresponding reduction in memory usage.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 6, 2026, 5:52pm UTC](https://developer.sailpoint.com/discuss/t/access-history-attribute-filtering/197228/5 "2026-06-06T17:52:10Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.