zcell_list_audit_customers_search
Search cellular audit logs over a lookback window to identify changes made by users, with optional filters for operation type, object, and visibility.
Instructions
Search Zscaler Cellular audit-log entries over a lookback window.
Read-only. Returns curated audit rows (who changed what, when, and the
operation) over a days window, with optional operation/object/visibility
filters. The before/after data blobs are omitted from the row.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | ||
| page | No | ||
| size | No | ||
| query | No | Optional JMESPath expression applied to the results after the API call, for client-side filtering and projection. Field names are exactly what the Zscaler API returns. Examples: "[?enabled==`true`]", "[*].{name: name, id: id}", "length(@)". Omit to get the full records. | |
| object_id | No | ||
| visibility | No | ||
| object_name | No | ||
| object_type | No | ||
| operation_type | No | ||
| modified_by_user_id | No |