Help getting audit logs via API

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Can I get more details about getting audit logs via API?
An example of how to send the request will be great.

Thank.

2

Hi @Sail_addict,

Thank you for posting and welcome to SailPoint Developer Forum.

You can use V3 Search APIs to get the Audit logs.

For Example,

If you require all events:

{
 "indices": [
 "events"
 ],
 "queryType": "SAILPOINT",
 "queryVersion": "5.2",
 "query": {
 "query": "type:*"
 }
}

Similarly, you can change the query to satisfy your requirements (adding some more examples below):
For Authentication History → type:auth
For Access Requests → type:access_request
For Provisioning Activity → type:provisioning
For Password Activity → type:password_activity

2 Likes
3

Is it possible to filter by certain dates? from date1 to date 2?

4

Hi @Sail_addict, you just need to add “created” condition.

Example:

type:* AND created:[2023-07-20 TO 2023-07-26]
5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.