Get audit trail events

Log in to see full request history
timestatususer agent
Retrieving recent requests…
LoadingLoading…

Overview

Use this method to get audit logs that allow you to monitor and alert suspicious activity of your employees.

🚧

Attention

This feature is available at an additional cost. Contact us to learn more.

📘

Note

  • Events are always sorted by ts in a descending order.
  • The maximum number of events per request is 20000.

Response explained

The HTTP status 200 in the response confirms the availability of our API:

NameTypeOptionalDescription
tsStringNoDate/time.
clientIdStringNoClient key.
activityStringNoEvent type.
subjectNameStringNoThe subject that executed the action.
ipStringNoIP from which the event was detected.
userAgentStringYesA user agent from which the event was detected.
xClientIdStringYesAPI / Dashboard / SDK.
correlationIdStringNoInternal ID for investigating requests.
applicantIdStringYesA unique applicant identifier.
externalUserIdStringYesA unique applicant identifier on the client side.
imageIdStringYesA unique document identifier.
descriptionStringYesAdditional information.

Event types

NameDescription
subject:loggedIn:dashboard:successUser successfully logged in to the Dashboard.
subject:loggedIn:dashboard:failureUser failed to log in to the Dashboard.
subject:loggedOut:dashboardUser logged out of the Dashboard.
subject:changed:applicantUser changed the applicant profile.
subject:loaded:applicantUser loaded an applicant page in the Dashboard.
subject:loaded:applicantListUser loaded a page with a list of applicants in the Dashboard. Also can be an applicant page if cnt=1.
subject:exported:applicantCsvListUser exported the applicant list under filters as CSV.
subject:downloaded:docImageUser downloaded the image on the applicant page (by manually clicking the Download button only). There are other ways to download the image without triggering this event.
subject:changed:applicantLevelUser changed the applicant level settings. E.g. created a new level, or deleted the existing one, changed the steps, and so on.
subject:changed:questionnaireUser changed the questionnaire settings. E.g. added a new question or deleted the existing one.
subject:changed:globalSettingsUser changed the global settings. E.g. recognition settings or allowed duplicates.
subject:changed:flowUser changed the flow settings. E.g. added, updated, or deleted any flow in the UI in: Integrations -> Customizations.
subject:changed:licenseKeyUser changed license key. E.g. created, updated, or deleted the license key in the UI in: Integrations -> Global Settings -> Source Keys.
subject:changed:poaStepSettingsUser changed the PoA step settings. E.g. created, updated, or deleted settings in the UI in: Integrations -> Global Settings -> User verification -> Proof of Address.
subject:changed:dictionaryUser changed one of the dictionaries (MobileSDK, WebSDK, Common etc.). E.g. created or updated dictionary in the UI in: Integrations -> SDK Translations.
subject:changed:paymentMethodDefinitionsUser changed payment methods settings. E.g. created, updated, or deleted one of the payment method definitions in the UI in: Integrations -> Payment methods.
subject:modified:workflowRevisionUser changed the workflow revision in the UI in: Integrations -> Applicant workflows.
subject:published:workflowRevisionUser published the workflow revision in the UI in: Integrations -> Applicant workflows.
subject:archived:workflowRevisionUser archived the workflow revision in the UI in: Integrations -> Applicant workflows.
subject:created:appTokenUser created an app token in the UI in: Dev space -> App tokens.
subject:deleted:appTokenUser deleted app token in the UI in: Dev space -> App tokens.
subject:modified:userModify parameters for the user.
subject:deleted:userDelete user.
subject:reset:passwordPassword has been reset via the Dashboard or link.
subject:modified:2faModify 2-factor authentication key into the system.
Query Params
string

The name of the subject for which events are received. If the name is not specified, the events are received for all subjects on the key.

string

If specified, only the events with this activity will be in the response.

string

Date/time events are received (yyyy-MM-dd HH:mm:ss, e.g. 2022-10-01 12:05:00). If not specified, the events are received the day before.

string

To the date/time events are received (yyyy-MM-dd HH:mm:ss, e.g. 2022-10-01 12:15:00). If not specified, the events are received up to the present moment.

string
Defaults to 10

The maximum number of events per request. Cannot be more than 20000. By default is 10.

string
Defaults to 0

Allows to skip the offset events before beginning to return the events. By default is 0.

Language
Credentials
Click Try It! to start a request and see the response here!