Search all events by a defined timeframe
GET {{stripeUrl}}/admin/v1/AuditEvents?filter=timestamp gt "2018-06-01T00:00:00.001Z" and timestamp lt "2018-06-02T00:00:00.001Z"
Oracle Identity Cloud Service's Audit Events REST endpoints enable you to get Audit logs covering significant events, changes, or actions. Using these APIs, you can integrate all Security Information and Event Management (SIEM), User and Entity Behavior Analytics (UEBA), and Cloud Access Security Broker (CASB) to poll Audit data.
Audit events enable you to review the actions performed by members of your organization using details provided by the Audit logs, such as who performed the action and what the action was. Oracle Identity Cloud Service, an Identity and Access Management platform, is the central point of control for all activities happening in the system. It generates audit data in response to all administrator and end user operations, such as User Login, Application Access, Password Reset, User Profile Update, CRUD operations on Users, Group, Applications, and so on.
Oracle Identity Cloud Service Audit Event APIs provide read access to your organization's Audit records. These audit records are stored in Oracle Identity Cloud Service for a maximum of 90 days, and then purged.
For more information:
https://docs.oracle.com/en/cloud/paas/identity-cloud/rest-api/usingauditeventapis.html http://www.ateam-oracle.com/under-the-hood-oracle-identity-cloud-service-audits/ https://docs.oracle.com/en/cloud/paas/identity-cloud/rest-api/api-audit-audit-events.html
Request Params
| Key | Datatype | Required | Description |
|---|---|---|---|
filter | string |
HEADERS
| Key | Datatype | Required | Description |
|---|---|---|---|
Authorization | string | ||
Date | string | ||
Content-Type | string |
RESPONSES
status: OK
{"schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse"],"totalResults":2,"Resources":[{"idcsCreatedBy":{"type":"User","display":"joe smith","value":"77ee9b4ac4d046d8b3236d801d92dad5","$ref":"https://tenant-base-url/admin/v1/Users/77ee9b4ac4d046d8b3236d801d92dad5"},"actorName":"joe.smith@example.com","ssoSessionId":"df92cef5-0e65-4a60-840f-6d2e343631a6","id":"4117a5856415405c8d1fc828f528bc22","ssoLocalIp":"172.xx.x.xx","actorDisplayName":"joe smith","meta":{"created":"2018-06-01T00:04:02.115Z","lastModified":"2018-06-01T00:04:02.115Z","resourceType":"AuditEvent","location":"https://tenant-base-url/admin/v1/AuditEvents/4117a5856415405c8d1fc828f528bc22"},"rId":"0:1:1","actorId":"77ee9b4ac4d046d8b3236d801d92dad5","ssoIdentityProvider":"localIDP","timestamp":"2018-06-01T00:04:02.112Z","idcsLastModifiedBy":{"value":"77ee9b4ac4d046d8b3236d801d92dad5","display":"joe smith","type":"User","$ref":"https://tenant-base-url/admin/v1/Users/77ee9b4ac4d046d8b3236d801d92dad5"},"quotaCount":0,"ecId":"CURxY0F8000000000","clientIp":"10.xxx.xx.xxx","ssoComments":"Session delete success","eventId":"sso.session.delete.success","ssoAuthnLevel":0,"ssoUserAgent":"Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.181 Safari/537.36","actorType":"User","serviceName":"SSO","message":"Session delete success","schemas":["urn:ietf:params:scim:schemas:oracle:idcs:AuditEvent"]},{"idcsCreatedBy":{"type":"User","display":"jack smith","value":"af4cd4f8143f4e1389b2920b27b9bc40","$ref":"https://tenant-base-url/admin/v1/Users/af4cd4f8143f4e1389b2920b27b9bc40"},"actorName":"jack.smith@example.com","id":"1d704d0d741048c3ae1dccc765155b5d","actorDisplayName":"Nagendra Adapala","meta":{"created":"2018-06-01T07:21:55.454Z","lastModified":"2018-06-01T07:21:55.454Z","resourceType":"AuditEvent","location":"https://tenant-base-url/admin/v1/AuditEvents/1d704d0d741048c3ae1dccc765155b5d"},"rId":"0:1:1:1","actorId":"af4cd4f8143f4e1389b2920b27b9bc40","adminResourceId":"af4cd4f8143f4e1389b2920b27b9bc40","adminResourceName":"jack.smith@example.com","timestamp":"2018-06-01T07:21:55.451Z","idcsLastModifiedBy":{"value":"af4cd4f8143f4e1389b2920b27b9bc40","display":"jack smith","type":"User","$ref":"https://tenant-base-url/admin/v1/Users/af4cd4f8143f4e1389b2920b27b9bc40"},"ecId":"iigF90H9000000000","clientIp":"10.xxx.xx.xxx","notificationDeliveryChannel":"EMAIL","eventId":"notification.delivery.success","notificationDeliveryEmailStatus":"SUCCESS","notificationDeliveryEmailSubject":"Password has been reset for Your tenant1 account","reasonValue":"201","notificationDeliveryEmailLocale":"en","notificationDeliveryEmailTo":"[jack.smith@example.com]","actorType":"User","serviceName":"Messaging","message":"The EMAIL notification was delivered successfully to the following recipients: [jack.smith@example.com].","notificationDeliveryEmailFrom":"no-reply@example.com","schemas":["urn:ietf:params:scim:schemas:oracle:idcs:AuditEvent"]}],"startIndex":1,"itemsPerPage":50}