Get Audit Logs

Get audit logs within given timestamp.

External Documentation

To learn more, visit the Lacework documentation.

Parameters

Parameter	Description
End Time	Query for changed files until given timestamp.
Start Time	Query for changed files since given timestamp.

Example Output

{
    "data": [
        {
            "accountName": "Lacework",
            "createdTime": "2020-12-18T18:38:28Z",
            "eventDescription": "User info@example.com logged in to Lacework account using OAuth credentials",
            "eventName": "User Login",
            "userAction": "Login with OAuth Succeeded",
            "userName": "info@example.com"
        },
        {
            "accountName": "Lacework",
            "createdTime": "2020-12-18T22:38:28Z",
            "eventDescription": "User info@example.com logged in to Lacework account using OAuth credentials",
            "eventName": "User Login",
            "userAction": "Login with OAuth Succeeded",
            "userName": "info@example.com"
        }
    ]
}

Workflow Library Example

Get Audit Logs with Lacework and Send Results Via Email

Preview this Workflow on desktop