Audience: System Administrators, Data Owners, and users with the AUDIT permission
Content Summary: This page outlines how to download the audit logs for your instance of Immuta through the API.
Deprecation notice
Support for the audit endpoint has been deprecated. Instead, pull audit logs from Kubernetes and push them to your SIEM.
Generate your API key on the API Keys tab on your profile page and save the API key somewhere secure.
You will pass this API key in the authorization header when you make a request, as illustrated in the example below:
curl \
--request GET \
--header "Content-Type: application/json" \
--header "Authorization: dea464c07bd07300095caa8" \
https://your-immuta-url.immuta.com/auditEndpoint
| Method | Path | Purpose |
|---|---|---|
Query Parameters
| Attribute | Description | Required |
|---|---|---|
Response Parameters
The response returns the audit records. See below for an example.
The request below saves 50 audit logs for https://your-immuta-url.immuta.com in the file audit-logs-file.son, with the audit records sorted by time in descending order.
curl \
--request GET \
--header "Content-Type: application/json" \
--header "Authorization: dea464c07bd07300095caa8" \
--output audit-logs-file.json \
https://your-immuta-url.immuta.com/audit?sortField=dateTime&sortOrder=desc{
"hits": [{
"dateTime": "1634144773832",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "29cfa243-5ca9-44a3-8600-35897e13f6fb",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634144525716",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "eea78076-4362-4563-aa3d-52f91eb87da1",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634144482422",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "3ede9275-434e-451e-9166-c2979162b2d0",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634144402132",
"dataSourceName": null,
"projectName": null,
"recordType": "authenticate",
"blobId": null,
"userId": "postgres_system",
"profileId": -1,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "774e50ac-7256-4f7a-8549-2fce65fc4a4a",
"fingerprintVersionName": null,
"email": null
}, {
"dateTime": "1634144332521",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "dc449dc3-1a38-4fcc-860b-14bcdca50ca0",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634144274492",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "cfad6adf-c734-43a4-be00-bf75c4ab2f7f",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634144170871",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "3aa0a81b-0079-4c9b-8a4c-3e7416578f26",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634144112457",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "b932e672-2d58-4fb7-86cc-26d3c5261526",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634144023606",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "e8acc422-a018-4d92-86b6-922994906105",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634143988892",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "ca52c9ac-0997-4d3d-8ce8-d73acb7313df",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634143739542",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "eaf1c1e7-2ef4-4c71-9114-9b69a35b543e",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634143712696",
"dataSourceName": null,
"projectName": null,
"recordType": "authenticate",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "580bc995-efa6-443e-8507-3736c930d6bd",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634138752546",
"dataSourceName": null,
"projectName": null,
"recordType": "handleTask",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "8718e9f1-3c04-4107-8875-8355a404b314",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634138602535",
"dataSourceName": null,
"projectName": null,
"recordType": "authenticate",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "40e9bc73-404b-4ede-9bd0-69ebd5aa211c",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634136717974",
"dataSourceName": null,
"projectName": null,
"recordType": "authenticate",
"blobId": null,
"userId": "postgres_system",
"profileId": -1,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "d11eae77-788e-4ec2-baa5-7a082d3ffed5",
"fingerprintVersionName": null,
"email": null
}, {
"dateTime": "1634079780159",
"dataSourceName": null,
"projectName": null,
"recordType": "authenticate",
"blobId": null,
"userId": "postgres_system",
"profileId": -1,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "3588c9bf-e4a2-436f-94dd-0d2330f6fdb7",
"fingerprintVersionName": null,
"email": null
}, {
"dateTime": "1634067298603",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "07246b92-090d-4a5a-a8e7-7b488ee70b9e",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634067297104",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "cb582e19-f1f3-41fe-a09e-3a5ac309b8b7",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634067294907",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "4972ea2c-bbe9-499c-84be-85d7a5c374af",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634067294126",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "7faeb85f-d372-4c7c-bda5-87260247a701",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634067293686",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "a90cd25a-044a-4cea-8919-39d7c8a429fc",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634067290827",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "9d37b7dd-6b04-4dbb-8852-a10007943c6b",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634067287997",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "9208fb13-9d33-4dc3-a550-f6b8ae70ed8e",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634067273092",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "91c9db98-bd19-4afc-b590-05d139cb3b32",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634067055915",
"dataSourceName": null,
"projectName": null,
"recordType": "taskDelete",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "5896ab8a-c71f-49a2-9279-ec6bb0b00c85",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066885023",
"dataSourceName": "Fake Medical Claims 2017",
"projectName": null,
"recordType": "queryDebugRequest",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "c929758b-60ce-48d2-9fdd-f33864e97330",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066884662",
"dataSourceName": null,
"projectName": null,
"recordType": "sqlQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "975c39ec-b0a4-4ac5-baa1-504f8e736a5e",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066621722",
"dataSourceName": null,
"projectName": null,
"recordType": "sqlQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "1c5cf9c7-4530-4e58-9475-a68257e53c6a",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066606932",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "7e5a5366-81d5-4306-8561-4ea0fe8bf09c",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066600664",
"dataSourceName": null,
"projectName": null,
"recordType": "auditQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11, 17],
"success": true,
"failureReason": null,
"warning": null,
"id": "65b05960-72bf-4bfe-8e7d-5e1efb9678ab",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066596494",
"dataSourceName": "Fake Medical Claims 2017",
"projectName": null,
"recordType": "sqlQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": false,
"id": "a1af3329-d096-4cc0-8037-10b63d437dac",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066592672",
"dataSourceName": null,
"projectName": null,
"recordType": "switchCurrentProject",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "9b457b86-256b-4c39-8c32-a9f346f78fde",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066586204",
"dataSourceName": "Fake Medical Claims 2017",
"projectName": null,
"recordType": "sqlQuery",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": false,
"failureReason": null,
"warning": false,
"id": "ced83fec-9518-424f-80d6-190dfdecf8ce",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066290381",
"dataSourceName": "Fake Medical Claims 2017",
"projectName": null,
"recordType": "policyHandlerUpdate",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11, 17],
"success": true,
"failureReason": null,
"warning": null,
"id": "4de17c25-875d-412c-bd35-7346eb86c9fe",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634066290361",
"dataSourceName": "Fake Medical Claims 2017",
"projectName": null,
"recordType": "dataSourceSave",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "3b79e204-70ff-4271-85ac-ac46042374e6",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065931127",
"dataSourceName": "Army Army Records",
"projectName": "Purpose Test",
"recordType": "addToProject",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11, 17],
"success": true,
"failureReason": null,
"warning": null,
"id": "c8c2ba1b-dc8e-4d4d-aa89-cdb3cfb81dae",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065922108",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11, 17],
"success": true,
"failureReason": null,
"warning": null,
"id": "6614f079-4508-4ee2-ab6f-1e026da9eaec",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065904373",
"dataSourceName": "Army Army Records",
"projectName": null,
"recordType": "policyHandlerCreate",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11, 17],
"success": true,
"failureReason": null,
"warning": null,
"id": "3021888b-1990-4330-9c58-b9f471fd0c15",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065904353",
"dataSourceName": "Army Army Records",
"projectName": null,
"recordType": "dataSourceSave",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "11514fd6-5409-45b0-9bb2-8f27ec51fce9",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065649381",
"dataSourceName": null,
"projectName": "Purpose Test",
"recordType": "acknowledgePurposes",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11, 17],
"success": true,
"failureReason": null,
"warning": null,
"id": "81381227-2b5d-4e8d-8dc8-d7292518054a",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065648353",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11, 17],
"success": true,
"failureReason": null,
"warning": null,
"id": "e6bbc894-4acd-43e1-92e4-cc7f12493001",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065647986",
"dataSourceName": null,
"projectName": "Purpose Test",
"recordType": "projectUpdate",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11, 17],
"success": true,
"failureReason": null,
"warning": null,
"id": "b6fb9802-eb3d-46dd-8fa2-397a6bb562b2",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065644190",
"dataSourceName": null,
"projectName": null,
"recordType": "purposeCreate",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11],
"success": true,
"failureReason": null,
"warning": null,
"id": "d8a670b4-b649-4a58-9511-a68b755bb4fc",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065626925",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11],
"success": true,
"failureReason": null,
"warning": null,
"id": "22037907-acb7-46b6-bb54-6bcfe4ff7e47",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065594293",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11],
"success": true,
"failureReason": null,
"warning": null,
"id": "0ad0aa26-ec6c-4aa9-a9ed-289153cb29ae",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065589401",
"dataSourceName": null,
"projectName": "Purpose Test",
"recordType": "switchCurrentProject",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": [11],
"success": true,
"failureReason": null,
"warning": null,
"id": "1d486411-10e3-4fe8-be32-ac67a78817ff",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065558756",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "c2b08363-3d79-44dd-8150-96c06f9b43ec",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065549471",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "82f5eb8a-406f-4a02-adb8-6ab00f9b94b8",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065502102",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "9ecee444-25ae-4891-8d8d-98700d396107",
"fingerprintVersionName": null,
"email": "katie@example.com"
}, {
"dateTime": "1634065481461",
"dataSourceName": null,
"projectName": null,
"recordType": "apiKey",
"blobId": null,
"userId": "katie@example.com",
"profileId": 2,
"purposeIds": null,
"success": true,
"failureReason": null,
"warning": null,
"id": "834c288a-1d98-4602-a9f1-fdcf2a1ce101",
"fingerprintVersionName": null,
"email": "katie@example.com"
}],
"facets": {
"datasources": [{
"name": "Public Credit Accounts",
"id": 1,
"count": "150"
}, {
"name": "Public Fake Medical Claims 2017",
"id": 3,
"count": "37"
}, {
"name": "Public Credit Transactions",
"id": 2,
"count": "33"
}, {
"name": "Dbo Customer Data",
"id": 26,
"count": "16"
}, {
"name": "Customers",
"id": 30,
"count": "16"
}, {
"name": "Army Army Records",
"id": 42,
"count": "15"
}, {
"name": "Immuta System Profiles",
"id": 17,
"count": "13"
}, {
"name": "Fake Medical Claims 2017",
"id": 47,
"count": "12"
}, {
"name": "Cities",
"id": 49,
"count": "11"
}, {
"name": "User 1 Data Source: Fake Medical Claims 2017",
"id": 52,
"count": "8"
}, {
"name": "Default Hp Sample Struct (deleted)",
"id": 8,
"count": "7"
}, {
"name": "Public Uciml Census Income Enriched",
"id": 4,
"count": "7"
}, {
"name": "Immuta System Version",
"id": 16,
"count": "5"
}, {
"name": "Dbo Employee Data",
"id": 27,
"count": "5"
}, {
"name": "dev (deleted)",
"id": 18,
"count": "5"
}, {
"name": "Dbo Healthcare Data",
"id": 28,
"count": "5"
}, {
"name": "Default Applicant Data (deleted)",
"id": 7,
"count": "4"
}, {
"name": "Default Hp Sample Struct (deleted)",
"id": 14,
"count": "4"
}, {
"name": "Default Struct Test (deleted)",
"id": 15,
"count": "4"
}, {
"name": "Default Struct Array Map (deleted)",
"id": 13,
"count": "4"
}, {
"name": "Default Struct Test (deleted)",
"id": 11,
"count": "4"
}, {
"name": "Matrix (deleted)",
"id": 21,
"count": "4"
}, {
"name": "Default Patient 193200000x (deleted)",
"id": 9,
"count": "4"
}, {
"name": "Default Synth Patients Covid (deleted)",
"id": 12,
"count": "4"
}, {
"name": "Sample Data Source",
"id": 46,
"count": "4"
}],
"projects": [{
"name": "Test Project Purpose",
"id": 5,
"count": "32"
}, {
"name": "API Test",
"id": 14,
"count": "16"
}, {
"name": "demo-api",
"id": 3,
"count": "10"
}, {
"name": "Project Created through the API",
"id": 15,
"count": "9"
}, {
"name": "Purpose Test",
"id": 17,
"count": "7"
}, {
"name": "Test5",
"id": 10,
"count": "2"
}],
"recordTypes": [{
"name": "authenticate",
"count": "99"
}, {
"name": "dataSourceSubscription",
"count": "98"
}, {
"name": "dataSourceSave",
"count": "86"
}, {
"name": "apiKey",
"count": "77"
}, {
"name": "sqlQuery",
"count": "70"
}, {
"name": "dataSourceCreate",
"count": "52"
}, {
"name": "dataSourceDelete",
"count": "44"
}, {
"name": "licenseCreate",
"count": "40"
}, {
"name": "globalPolicyRemoved",
"count": "32"
}, {
"name": "globalPolicyDisabled",
"count": "28"
}, {
"name": "policyImport",
"count": "28"
}, {
"name": "policyHandlerUpdate",
"count": "24"
}, {
"name": "auditQuery",
"count": "21"
}, {
"name": "acknowledgePurposes",
"count": "20"
}, {
"name": "projectSubscription",
"count": "18"
}, {
"name": "tagAdded",
"count": "17"
}, {
"name": "projectUpdate",
"count": "16"
}, {
"name": "globalPolicyApplied",
"count": "16"
}, {
"name": "licenseDelete",
"count": "14"
}, {
"name": "purposeCreate",
"count": "13"
}, {
"name": "addToProject",
"count": "13"
}, {
"name": "policyExport",
"count": "12"
}, {
"name": "globalPolicyUpdate",
"count": "11"
}, {
"name": "globalPolicyCreate",
"count": "11"
}, {
"name": "policyHandlerCreate",
"count": "11"
}],
"users": [{
"name": "katie@example.com",
"id": 2,
"count": "892"
}, {
"name": "user@example.com",
"id": 3,
"count": "55"
}, {
"name": "immuta_system_account",
"id": 1,
"count": "5"
}, {
"name": "azure blob storage_indexer_19",
"id": 5,
"count": "1"
}, {
"name": "azure blob storage_indexer_18",
"id": 4,
"count": "1"
}],
"outcomes": [{
"name": "success",
"count": "828"
}, {
"name": "userError",
"count": "99"
}, {
"name": "systemError",
"count": "16"
}, {
"name": "failure",
"count": "8"
}, {
"name": "insufficientAuthorizations",
"count": "2"
}, {
"name": "insufficientPermissions",
"count": "1"
}]
},
"minDate": "2021-09-09T13:47:30.914Z",
"maxDate": "2021-10-13T17:06:13.832Z",
"count": 1110
}GET
/audit
Gets the audit records for the instance of Immuta.
dataSourceId
array[integer] Returns records for the data source with the specified ID.
No
projectId
array[integer] Returns records for the project with the specified ID.
No
profileId
array[integer] Returns records for the user with the specified profile ID.
No
recordType
string Returns the type of audit record specified. See recordTypes in the response example below for details.
No
outcome
string Returns records based on the specified outcome: success, userError, systemError, insufficientAuthorizations, failure, or insufficientPermissions.
No
minDate
date The date of the oldest audit record to include.
No
maxDate
date The date of the most recent audit record to include.
No
blobId
string Returns audit records for the specified blobId.
No
purpose
integer Returns audit records for the purpose with the specified ID.
No
offset
integer Used in combination with size to fetch pages. Example: "size=10&offset=10" would return the second page or "size=10&offset=20" would return the third page.
No
size
integer The number of results to return per page. Default is 50.
No
sortField
string Sorts the records by the specified field. Default is dateTime.
No
sortOrder
string Sorts records in ascending (asc) or descending (desc) order. Default is desc.
No