Displaying user-friendly identifiers instead of technical UIDs in IDN logs

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello,

Current Setup

Our IDN implementation uses technical user ID as the primary identifier for user identities (Sailpoint Username/uid). While this works at a system level, it creates readability issues in our logs.

Issue

When viewing logs through the search menu, the “Target” field displays these technical UIDs, making it difficult to quickly identify which user was involved in an action. For example, our logs look like this :

Status : FAILED
Actor : System
Target : 00000123
Name : Modify Account Failed

Is there any way to display an email or a display name instead of the uid in the Target field ?

Thank you

1 Like
2

Hi @davidtrn
Can you clarify which logs you’re looking at? Is this through API or the search in the UI?

3

Hi Vincent,
In this example both as the logs displayed in the search UI are the same we are getting from the API (/search).

4

@davidtrn these are event logs which provides details about the target using its uid itself .if you want more info on the user. You may need to write a PowerShell script using search API to first read the events and then from events you can get more info about the user using other API available

5

If you’re using the UI, you should be able to see the display names or add a column that would have the display name as well. And as @schattopadhy said, if you’re using API, you can use a script to string multiple calls together that would gather the info you’re looking for.

6

Got a response from the support :
“Unfortunately, as per the current design there is no way to show any other attribute here.”

So seems like there are no ootb feature to change it and it would require additionnal scripts/API call