@colin_mckibben my use case is finding failed account aggregations as we have audit controls wrapped around them.
While searching for action:SOURCE_ACCOUNT_AGGREGATION_FAILED does produce results, it lacks the error messages that are contained in the /api/event/list endpoint
Event search - how do I follow the trackingNumber breadcrumb here?
{
"org": "chk-sb",
"pod": "stg02-useast1",
"created": "2023-12-01T14:35:46.627Z",
"id": "b3f5d88f1fd345b7b2d8ed74299abfae",
"action": "SOURCE_ACCOUNT_AGGREGATION_FAILED",
"type": "SOURCE_MANAGEMENT",
"actor": {},
"target": {
"name": "Allegro DB [source]"
},
"stack": "qpoc",
"trackingNumber": "f0aea96bc6214e9281ee1d87c4060d0b",
"attributes": {
"aggregationId": "3d14bd29c77a4af9adb462a823a1f7a2",
"sourceId": "2c918088768763fb0176d382b5416913",
"sourceName": "Allegro DB"
},
"objects": [
"SOURCE",
"ACCOUNT"
],
"operation": "AGGREGATE",
"status": "FAILED",
"technicalName": "SOURCE_ACCOUNT_AGGREGATE_FAILED",
"name": "Aggregate Source Account Failed",
"synced": "2023-12-01T14:35:46.871Z",
"_type": "event",
"_version": "v7"
}
/api/event/list
{
"id": 4812685,
"type": "CLOUD_ACCOUNT_AGGREGATION",
"status": "ERROR",
"timestamp": "2023-12-01T14:41:58Z",
"dateCreated": "2023-12-01T14:41:58Z",
"details": {
"name": "Cloud Account Aggregation",
"description": null,
"messages": {
"Error": "[ ConnectorException ] \n [ Error details ] The server encountered an unexpected error while contacting target system. Please check the logs. Invalid column name 'securitygrou'."
},
"attributes": {
"eventId": 4812685,
"total": "0",
"clusterCcgBuild": "928",
"appId": "2c918088768763fb0176d382b5416913",
"optimizedAggregation": "enabled"
},
"completed": 1701441719616,
"id": "e26c52b374db4714b2dfcf9a0359c4bf",
"launched": 1701441717577,
"status": "Error"
},
"user": {
"alias": "366088",
"externalId": "2c91808670f4c5dd0170f82275627256",
"displayName": "Mark Cheek"
},
"object": {
"id": 153400,
"externalId": "2c918088768763fb0176d382b5416913",
"type": "source",
"displayName": "Allegro DB"
}
}