Sign in

v1

latestOpenAPI 3.0.3FortiCNAPP Use License2026-08-041754351.1 MB
AuditLogs

Audit Logs

Get audit logs by invoking the following endpoint:

GET https://YourAccount.lacework.net/api/v2/AuditLogs

Optionally specify the startTime and endTime time range filters using the following formats:

  • yyyy-MM-dd for example, 2020-12-18

  • yyyy-MM-ddTHH for example, 2020-12-18T08

  • yyyy-MM-ddTHH:mm:ssZ for example, 2020-12-18T08:00:00Z

  • yyyy-MM-ddTHH:mm:ss.SSSZ for example, 2020-12-18T08:00:00.000Z

To use the current time as the end time, exclude the endTime parameter.

Here is an example invocation:

GET https://YourAccount.lacework.net/api/v2/AuditLogs?startTime=2020-12-11T08:00:00Z&endTime=2020-12-18T08:00:00Z

get/api/v2/AuditLogs

Query parameters

startTimestring

Returns only recorded actions that occurred after this timestamp.

endTimestring

Returns only recorded actions that occurred before this timestamp. If empty or missing, the current time is used.

Headers

Authorizationstring required

Bearer Access Token. For example, "Bearer {YourAPIToken}"

Content-Typestring required

application/json

Org-Accessboolean

Use this attribute to specify if the access token has organization admin permissions. If the access token has only account permissions, use the Account-Name attribute to specify which account to access.

Account-Namestring

Use this attribute to specify which sub-account to access.

Response

No Error (List of Audit Logs)