audits_management_logs
Retrieve Cortex XSIAM audit management logs with filtering and sorting to analyze user actions and system events.
Instructions
Get Audit Management Log
Get audit management logs.
Response is concatenated using AND condition (OR is not supported).
Maximum result set size is 100.
Offset is the zero-based number of incidents from the start of the result set.
[POST /public_api/v1/audits/management_logs] · Audit log
Example request body:
{
"request_data": {
"search_from": 0,
"search_to": 19,
"sort": {
"field": "email",
"keyword": "ASC"
},
"filters": [
{
"field": "type",
"operator": "in",
"value": [
"AUTH"
]
},
{
"field": "sub_type",
"operator": "in",
"value": [
"login"
]
},
{
"field": "result",
"operator": "in",
"value": [
"SUCCESS"
]
},
{
"field": "timestamp",
"operator": "lte",
"value": 1565074114053
}
]
}
}Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request_data | No | A dictionary containing the API request fields. An empty dictionary returns all results. |