Use this endpoint to get a list with details about your Discovery audit logs.
curl --location --request POST 'https://daas.digicert.com/apicontroller/v1/auditlog/list' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
--data-raw
'{
"accountId": 5153184,
"searchCriteriaList": [{
"key": "function",
"operation": "EQUALS",
"value": ["Abort scan"]
}],
"divisionIds": [],
"isFromWallAlert": false,
"startIndex": 1,
"pageSize": 50,
"filterSelected": "user",
"sortedColumnId": "createdDate",
"sortOrder": "DESC"
}'
{
{
"error": null,
"data": {
"totalCount": 30470,
"currentCount": 50,
"auditLogs": [{
"id": 1254615,
"userId": 7286246,
"userName": "CertCentral Admin",
"divisionId": null,
"divisionName": "",
"module": "Sensors",
"function": "Download sensor",
"message": "Sensor downloaded\n Type: windows",
"detailMessage": "",
"ipAddress": "172.16.0.83",
"ipCountry": "",
"createdDate": 1649144970189
}, {
"id": 1254614,
"userId": 7286246,
"userName": "CertCentral Admin",
"divisionId": null,
"divisionName": "",
"module": "Sensors",
"function": "Download sensor",
"message": "Sensor downloaded\n Type: windows",
"detailMessage": "",
"ipAddress": "172.16.0.83",
"ipCountry": "",
"createdDate": 1649144965032
}, {
"id": 1254566,
"userId": -1,
"userName": "System",
"divisionId": 677793,
"divisionName": "",
"module": "Certificates",
"function": "Certificates expiring in 90 days",
"message": "90-day expiration notice sent",
"detailMessage": "Sent to:\nmo@digicert.com,daas@digicert.com\nFor certificates:\nlogistics.amazon.com",
"ipAddress": "",
"ipCountry": "",
"createdDate": 1649144701423
}]
}
}
Name | Req/Opt | Type | Description |
---|---|---|---|
accountId | required | string | Account ID. |
searchCriteriaList | optional | array |
Filter results by specified values. The array includes key, operation and value. For definitions, see the Filter options for searchCriteriaList table below.Example: searchCriteriaList:[{"key":"function","operation":"EQUALS","value":["Abort scan"]}]
|
divisionIds | required | array | User's division IDs. |
startIndex | optional | integer |
Index of the first result. Default: 1
|
pageSize | optional | integer |
Number of records per page. Allowed values: 0 to 512 Default: 50
|
filterSelected | required | string |
The value to show in the results for each sensor that meets the search criteria. Allowed values: userName , dateRange , function , ipAddress , divisionName
|
sortedColumnId | optional | string |
Sort results by specified parameter. Allowed values: createdDate , userName , ipAddress , divisionName , ipCountry Default: createdDate
|
sortOrder | optional | string |
Sort direction. Allowed values: DESC (descending: 9-0, Z-A), ASC (ascending: 0-9, A-Z)Default: DESC
|
Name | Type | Description |
---|---|---|
error | object | Includes error codes, if any. |
data | object | Object with information about the filter results. |
..totalCount | integer | Total number of keys based on the filter criteria. |
.. currentCount | integer | Number of records on current page. |
.. auditLogs | array | Container for audit logs detail. |
.. .. id | integer | ID associated with the audit log. |
.. .. userId | integer | User ID of the person who performed the action. |
.. .. userName | string | Name of the user who performed the action. |
.. .. divisionId | integer | User’s division ID. |
.. .. divisionName | string | User’s division name. |
.. .. module | string | Module for which the audit log is generated. |
.. .. function | string | Functional action for which the audit log is generated. |
.. .. message | string | Action message sent for the audit log. |
.. .. detailMessage | string | Detailed message with additional information about the request. |
.. .. ipAddress | string | IP address of the user’s system or network from where the action was performed. |
.. .. ipCountry | string | Country from where the action is performed. |
.. .. createdDate | integer | Date when the audit log was created. |
The array includes key, operation and value.
Key | Operation | Value |
---|---|---|
userName
|
EQUALS |
Username
|
dateRange
|
EQUALS |
dateFrom -string , dateTo-string
|
function
|
EQUALS |
User action performed
|
ipAddress
|
EQUALS |
User IP address
|
divisionName
|
EQUALS |
Division name
|