# IDN API events audit

**URL:** <https://developer.sailpoint.com/discuss/t/idn-api-events-audit/85801>\
**Category:** SHF Discussion and Questions\
**Tags:** audit, sailpoint-identity-security, apis\
**Created:** [October 17, 2024, 1:51pm UTC](https://developer.sailpoint.com/discuss/t/idn-api-events-audit/85801 "2024-10-17T13:51:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![victdelgado](https://avatars.discourse-cdn.com/v4/letter/v/e95f7d/32.png) [@victdelgado](https://developer.sailpoint.com/discuss/u/victdelgado)\
**Post date:** [October 17, 2024, 1:51pm UTC](https://developer.sailpoint.com/discuss/t/idn-api-events-audit/85801/1 "2024-10-17T13:51:41Z")

</div>

we are waching that the “API” “events” that was implemented in before api versions, was deprecated, what is the new api to get the audit events, we need to get the changes when some user is assing the “admin user level”.

thanks for your help

---

<div class="post-metadata">

**Author:** ![Shubhams\_009](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@Shubhams\_009](https://developer.sailpoint.com/discuss/u/Shubhams_009)\
**Post date:** [October 17, 2024, 2:09pm UTC](https://developer.sailpoint.com/discuss/t/idn-api-events-audit/85801/2 "2024-10-17T14:09:14Z")

</div>

Hi Victor,

Not sure if you are talking about this api.

> [@GET /api/event/list](https://developer.sailpoint.com/discuss/t/get-api-event-list/20736):
>
> Replaced by: Also, search can be used to find events. More specifically, you can use the following request body to search on events: { "indices": ["events"], "query": { "query": "\*" } } For more information on search for events, please read the following:

I also use this doc for searching audit events with API or search query  
[https://community.sailpoint.com/t5/IdentityNow-Wiki/Audit-Events-in-Cloud-Audit/ta-p/218727](https://community.sailpoint.com/t5/IdentityNow-Wiki/Audit-Events-in-Cloud-Audit/ta-p/218727)

Hope this helps a little!

Thanks,  
Shubham

---

<div class="post-metadata">

**Author:** ![mohammedfavazhrb](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mohammedfavazhrb/32/16892_2.png) [@mohammedfavazhrb](https://developer.sailpoint.com/discuss/u/mohammedfavazhrb)\
**Post date:** [October 18, 2024, 6:41am UTC](https://developer.sailpoint.com/discuss/t/idn-api-events-audit/85801/3 "2024-10-18T06:41:59Z")

</div>

Hi @victdelgado ,

if you need to get the list of events when admin access is assigned, you can use the search API with below query  
`attributes.attributeValue:org_admin AND status:PASSED`

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [December 17, 2024, 6:42am UTC](https://developer.sailpoint.com/discuss/t/idn-api-events-audit/85801/4 "2024-12-17T06:42:46Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.