Hi, I am looking help on one audit information. Use case is - I have to find date/time when one particular email template was sent to users (daily/weekly/monthly basis). That particular email template is “Password Reset Code” I checked this email template documentation - https://documentation.sailpoint.com/saas/help/common/emails/et_pw_resetcode.html- but I am not able to find how to get audit info.
Hi @hranjan3 ,
You can find the email template for Password Reset code here - [Password Reset Code Email Template - SailPoint Identity Services]
(Password Reset Code Email Template - SailPoint Identity Services)
For your use case, I believe Search functionality can help. You can use below search filter to fetch such records:
technicalName:"EMAIL_SEND_PASSED" AND attributes.info:"Password Reset Code"
You can either create a Saved Search to send out the report or you can use scripts to fetch these records via Search | SailPoint Developer Community using the same query. Another possible way is to use workflows with search query which helps to send out report via email.
Hope this helps.
Thanks,
Shailee
Hi @shaileeM Thanks for your response, I tried the given search query but looks like its not taking attributes.info:“Password Reset Code” If I just use technicalName:“EMAIL_SEND_PASSED” and enable all columns from result, I don’t see any column for info.
Could you please try at your end as well.
Also I see that email send via workflow is not captured using search query.
Hi Shailee,
Thanks for your response. I tried but no success yet.
yesterday we had several test cases where “Password Reset Code” email template was sent to users.
Hi @hranjan3 ,
Yes, you are right. I also went and searched for few use cases and I can see that “Password Reset Code” are never appearing in the search results, even when I used search API for the same query. I do see “Password Update” email records returned once the user completes the password reset journey.
technicalName:"EMAIL_SEND_PASSED" AND attributes.info:"password update"
Its worth opening a case with SailPoint support and check with them on this.
Thanks,
Shailee
1 Like
Hi @hranjan3 ,
In case of password reset code activities can be find out based on search - type:“PASSWORD_ACTIVITY”.
In above provided type you will get the list of all event which contains the change & update password etc. Once query provides the list of results it can be saved and the same query can opt out for the subscription. So based on the provided scheduled configuration it will send out the emails to respective users.
Thanks,
Prashant
1 Like
@PrashantMishra and @shaileeM thanks for your inputs. I will also check with SP team on this.
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.