List audit logs


Use this endpoint to get a list with details about your Discovery audit logs.

curl --location --request POST '' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
    "accountId": 5153184,
    "searchCriteriaList": [{
        "key": "function",
        "operation": "EQUALS",
        "value": ["Abort scan"]
    "divisionIds": [],
    "isFromWallAlert": false,
    "startIndex": 1,
    "pageSize": 50,
    "filterSelected": "user",
    "sortedColumnId": "createdDate",
    "sortOrder": "DESC"
200 OK
    "error": null,
    "data": {
        "totalCount": 30470,
        "currentCount": 50,
        "auditLogs": [{
            "id": 1254615,
            "userId": 7286246,
            "userName": "CertCentral Admin",
            "divisionId": null,
            "divisionName": "",
            "module": "Sensors",
            "function": "Download sensor",
            "message": "Sensor downloaded\n Type: windows",
            "detailMessage": "",
            "ipAddress": "",
            "ipCountry": "",
            "createdDate": 1649144970189
        }, {
            "id": 1254614,
            "userId": 7286246,
            "userName": "CertCentral Admin",
            "divisionId": null,
            "divisionName": "",
            "module": "Sensors",
            "function": "Download sensor",
            "message": "Sensor downloaded\n Type: windows",
            "detailMessage": "",
            "ipAddress": "",
            "ipCountry": "",
            "createdDate": 1649144965032
        }, {
            "id": 1254566,
            "userId": -1,
            "userName": "System",
            "divisionId": 677793,
            "divisionName": "",
            "module": "Certificates",
            "function": "Certificates expiring in 90 days",
            "message": "90-day expiration notice sent",
            "detailMessage": "Sent to:\,\nFor    certificates:\",
            "ipAddress": "",
            "ipCountry": "",
            "createdDate": 1649144701423

Request parameters

Name Req/Opt Type Description
accountId required string Account ID.
searchCriteriaList optional array Filter results by specified values.
The array includes key, operation and value.
For definitions, see the Filter options for searchCriteriaList table below.
Example: searchCriteriaList:[{"key":"function","operation":"EQUALS","value":["Abort scan"]}]
divisionIds required array User's division IDs.
startIndex optional integer Index of the first result.
pageSize optional integer Number of records per page.
Allowed values0 to 512
filterSelected required string The value to show in the results for each sensor that meets the search criteria.
Allowed values:userName, dateRange, function, ipAddress, divisionName
sortedColumnId optional string Sort results by specified parameter.
Allowed values: createdDate, userName, ipAddress, divisionName, ipCountry
Default: createdDate
sortOrder optional string Sort direction.
Allowed values: DESC (descending: 9-0, Z-A), ASC (ascending: 0-9, A-Z)
Default: DESC

Response parameters

Name Type Description
error object Includes error codes, if any.
data object Object with information about the filter results.
..totalCount integer Total number of keys based on the filter criteria.
.. currentCount integer Number of records on current page.
.. auditLogs array Container for audit logs detail.
.. .. id integer ID associated with the audit log.
.. .. userId integer User ID of the person who performed the action.
.. .. userName string Name of the user who performed the action.
.. .. divisionId integer User’s division ID.
.. .. divisionName string User’s division name.
.. .. module string Module for which the audit log is generated.
.. .. function string Functional action for which the audit log is generated.
.. .. message string Action message sent for the audit log.
.. .. detailMessage string Detailed message with additional information about the request.
.. .. ipAddress string IP address of the user’s system or network from where the action was performed.
.. .. ipCountry string Country from where the action is performed.
.. .. createdDate integer Date when the audit log was created.

Filter options for searchCriteriaList

The array includes key, operation and value.

Key Operation Value
userName EQUALS Username
dateRange EQUALS dateFrom -string, dateTo-string
function EQUALS User action performed
ipAddress EQUALS User IP address
divisionName EQUALS Division name