Get Audit Trail Stream

The endpoint returns streamed list of audit trail events of the pod depending on input parameters such as the categories of audits, time interval etc. Pages can contain an unlimited number of records.

Get Audit Trail Stream

get

This operation returns streamed list of audit trail events. You can narrow down search results by specifying categories, action, originating userId, attribute, groupId, authorization role, streamId, affected userId, temporary authId, disclaimerId or policyId parameter. Pages can contain an unlimited number of records. This operation returns only audits for the categories the requester is entitled to.

Query parameters
startDatestringOptional

start range date restriction. Date must be formatted the following way: yyyy-MM-dd'T'HH:mm:ss.SSS'Z'

endDatestringOptional

end range date restriction. Date must be formatted the following way: yyyy-MM-dd'T'HH:mm:ss.SSS'Z'

categoriesstringRequired

List of Audit Trail categories restriction

Example: login,malwarescan
affectedUserIdstringOptional

"Affected User Id" filter single value restriction

originatingUserIdstringOptional

"Originating User Id" filter single value restriction (a.k.a. "Performed by)"

actionIdstringOptional

"Action Id" filter single value restriction

attributestringOptional

"Attribute" filter single value restriction

groupIdstringOptional

"Group Id" filter single value restriction (used by Info barrier, Role Scope...)

authorizationRolestringOptional

"Authorization Role" filter single value restriction

streamIdstringOptional

"Stream Id" filter single value restriction (using either Base64 or Base64URL encoding)

policyIdstringOptional

"Policy Id" filter single value restriction

applicationIdstringOptional

"Application Id" filter single value restriction

tempAuthIdstringOptional

"Temporary Authorization Id" filter single value restriction

disclaimerIdstringOptional

"Disclaimer Id" filter single value restriction

dateFormatstringOptional

Used format for output date values. Possible values: STANDARD_AT_ACP_DATE - MM-dd-YYYY - as historically used in Symphony Audit Trails or anything supported by java11 DateTimeFormatter (https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/time/format/DateTimeFormatter.html) BASIC_ISO_DATE ISO_DATE ISO_DATE_TIME ISO_INSTANT ISO_LOCAL_DATE ISO_LOCAL_DATE_TIME ISO_LOCAL_TIME ISO_OFFSET_DATE ISO_OFFSET_DATE_TIME ISO_OFFSET_TIME ISO_ORDINAL_DATE ISO_TIME ISO_WEEK_DATE ISO_ZONED_DATE_TIME RFC_1123_DATE_TIME any supported date/time pattern - YYYYMMddHHmmss, ....

Default: STANDARD_AT_ACP_DATE
limitinteger · int32 · min: 1Optional

Specifies the maximum number of objects to return. It is possible that fewer than the specified number is returned, either due to reaching the end of the record set or due to data access rules that filter results of the back end query. The number of returned objects should not be used to determine if there are more objects to retrieve. Instead, the presence of the "next" and "previous" (see below) fields should be used.

Header parameters
Content-Typestring · enumOptional

Content-type expected in return

Possible values:
Responses
200
Success
text/csv
Responsestring · binary

Only used to reference org.springframework.web.servlet.mvc.method.annotation.StreamingResponseBody

get
GET /at2/v1/audits/stream?categories=login%2Cmalwarescan HTTP/1.1
Host: youraudittrailURL.symphony.com
Accept: */*

binary

Last updated

Was this helpful?