I am trying to see if there’s a way of ‘peeling back the onion’ on audit events around source updates. So, two questions: Does anyone know the specific source modifications that trigger the event “Update Source Passed”? For example, changing the source owner does not trigger it but adding a field…

Event Details - what does the GUID represent and can I query that?

Identity Security Cloud (ISC) ISC Discussion and Questions

mcheek (Mark Cheek) September 7, 2023, 1:52pm 14

Hey @colin_mckibben it looks like the “details” field corresponds to the Slpt-Request-Id response header whenever you make a source update. Is that something that’s traceable?

(FYI for @RTASB )

Topic		Replies	Views
Source Updated Event Trigger Not Always Firing ISC Discussion and Questions identity-security-cloud , event-triggers , sources	8	528	December 23, 2023
Event Trigger filter ISC Discussion and Questions	16	2448	July 29, 2023
Search API not returning sourceId ISC Discussion and Questions	3	558	July 19, 2023
API for Audit Logs? ISC Discussion and Questions apis , identity-security-cloud	3	269	December 24, 2023
Complex event trigger ISC Discussion and Questions identity-security-cloud , event-triggers	2	251	February 12, 2024

Event Details - what does the GUID represent and can I query that?

Related Topics