Sign in

v1

latestOpenAPI 3.0.3FortiCNAPP Use License2026-08-041754351.1 MB
AuditLogs

Search Audit Logs

Search the audit logs by invoking the following endpoint:

POST https://YourAccount.lacework.net/api/v2/AuditLogs/search

Optionally specify filters in the request body. For more information about using filters, see the Simple & Advanced Search section.

For the timeFilter filter, these are the supported time formats:

  • yyyy-MM-dd for example, 2020-12-18

  • yyyy-MM-ddTHH for example, 2020-12-18T08

  • yyyy-MM-ddTHH:mm:ssZ for example, 2020-12-18T08:00:00Z

  • yyyy-MM-ddTHH:mm:ss.SSSZ, for example, 2020-12-18T08:00:00.000Z

To use the current time as the end time, exclude the endTime field.

post/api/v2/AuditLogs/search

Headers

Authorizationstring required

Bearer Access Token. For example, "Bearer {YourAPIToken}"

Content-Typestring required

application/json

Org-Accessboolean

Use this attribute to specify if the access token has organization admin permissions. If the access token has only account permissions, use the Account-Name attribute to specify which account to access.

Account-Namestring

Use this attribute to specify which sub-account to access.

Request body

returnsstring[]

Use this attribute to specify which top-level fields of the response schema you want to receive.

Response

No Error (List of Audit Logs)