> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Logs

The Okta System Log API provides read access to your organization’s system log. This API provides more functionality than the Events API.

<Note>
  External Documentation

  To learn more, visit the [Okta documentation](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/SystemLog/#tag/SystemLog/operation/listLogEvents).
</Note>

## Basic Parameters

<div className="integrations-table">
  | Parameter        | Description                                                                                                                    |
  | ---------------- | ------------------------------------------------------------------------------------------------------------------------------ |
  | Query            | Filters the log events results by one or more exact keywords.                                                                  |
  | Return All Pages | Automatically fetch all resources, page by page.                                                                               |
  | Since            | Filters the lower time bound of the log events published property for bounded queries or persistence time for polling queries. |
  | Until            | Filters the upper time bound of the log events published property for bounded queries or persistence time for polling queries. |
</div>

## Advanced Parameters

<div className="integrations-table">
  | Parameter  | Description                                                                                                                                                                                                                       |
  | ---------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | Filter     | Filter Expression that filters the results, for more information visit [https://developer.okta.com/docs/reference/api/system-log/#expression-filter](https://developer.okta.com/docs/reference/api/system-log/#expression-filter) |
  | Limit      | Sets the number of results that are returned in the response.                                                                                                                                                                     |
  | Sort Order | The order of the returned events.                                                                                                                                                                                                 |
</div>

## Example Output

```json theme={"dark"}
[
	{
		"actor": {
			"id": "<string>",
			"type": "<string>",
			"alternateId": "<string>",
			"displayName": "<string>",
			"detailEntry": null
		},
		"client": {
			"userAgent": {
				"rawUserAgent": "<string>",
				"os": "<string>",
				"browser": "<string>"
			},
			"zone": "<string>",
			"device": "<string>",
			"id": null,
			"ipAddress": "<string>",
			"geographicalContext": {
				"city": "<string>",
				"state": "<string>",
				"country": "<string>",
				"postalCode": "<string>",
				"geolocation": {
					"lat": 16,
					"lon": 36
				}
			}
		},
		"device": null,
		"authenticationContext": {
			"authenticationProvider": null,
			"credentialProvider": null,
			"credentialType": null,
			"issuer": null,
			"interface": null,
			"authenticationStep": 1,
			"rootSessionId": "<string>",
			"externalSessionId": "<string>"
		},
		"displayMessage": "<string>",
		"eventType": "<string>",
		"outcome": {
			"result": "<string>",
			"reason": "<string>"
		},
		"published": "2001-11-12T14:30:22.922Z",
		"securityContext": {
			"asNumber": 16883,
			"asOrg": "<string>",
			"isp": "<string>",
			"domain": null,
			"isProxy": false
		},
		"severity": "<string>",
		"debugContext": {
			"debugData": {
				"authnRequestId": "<string>",
				"deviceFingerprint": "<string>",
				"oktaUserAgentExtended": "<string>",
				"requestId": "<string>",
				"dtHash": "<string>",
				"challengeAuthenticatorsList": "<string>",
				"requestUri": "<string>",
				"threatSuspected": "<string>",
				"url": "<string>",
				"logOnlySecurityData": "<string>"
			}
		},
		"legacyEventType": null,
		"transaction": {
			"type": "<string>",
			"id": "<string>",
			"detail": {}
		},
		"uuid": "<string>",
		"version": "<string>",
		"request": {
			"ipChain": [
				{
					"ip": "<string>",
					"geographicalContext": {
						"city": "<string>",
						"state": "<string>",
						"country": "<string>",
						"postalCode": "<string>",
						"geolocation": {
							"lat": 9,
							"lon": 50
						}
					},
					"version": "<string>",
					"source": null
				}
			]
		},
		"target": [
			{
				"id": "<string>",
				"type": "<string>",
				"alternateId": "<string>",
				"displayName": "<string>",
				"detailEntry": {
					"signOnModeType": "<string>",
					"signOnModeEvaluationResult": "<string>"
				}
			},
			{
				"id": "<string>",
				"type": "<string>",
				"alternateId": "<string>",
				"displayName": "<string>",
				"detailEntry": {
					"policyName": "<string>",
					"policyRuleFactorMode": "<string>"
				}
			}
		]
	},
	{
		"actor": {
			"id": "<string>",
			"type": "<string>",
			"alternateId": "<string>",
			"displayName": "<string>",
			"detailEntry": null
		},
		"client": {
			"userAgent": {
				"rawUserAgent": "<string>",
				"os": "<string>",
				"browser": "<string>"
			},
			"zone": "<string>",
			"device": "<string>",
			"id": null,
			"ipAddress": "<string>",
			"geographicalContext": {
				"city": "<string>",
				"state": "<string>",
				"country": "<string>",
				"postalCode": "<string>",
				"geolocation": {
					"lat": 70,
					"lon": 31
				}
			}
		},
		"device": null,
		"authenticationContext": {
			"authenticationProvider": "<string>",
			"credentialProvider": null,
			"credentialType": "<string>",
			"issuer": null,
			"interface": "<string>",
			"authenticationStep": 1,
			"rootSessionId": "<string>",
			"externalSessionId": "<string>"
		},
		"displayMessage": "<string>",
		"eventType": "<string>",
		"outcome": {
			"result": "<string>",
			"reason": null
		},
		"published": "2017-12-14T07:43:21.762Z",
		"securityContext": {
			"asNumber": 2191,
			"asOrg": "<string>",
			"isp": "<string>",
			"domain": null,
			"isProxy": false
		},
		"severity": "<string>",
		"debugContext": {
			"debugData": {
				"agentid": "<string>",
				"delauthtimeout": "<string>",
				"deviceFingerprint": "<string>",
				"behaviors": "<string>",
				"requestUri": "<string>",
				"delauthtimespentatagent": "<string>",
				"url": "<string>",
				"authnRequestId": "<string>",
				"requestId": "<string>",
				"dtHash": "<string>",
				"actionid": "<string>",
				"delauthtimetotal": "<string>",
				"risk": "<string>",
				"threatSuspected": "<string>",
				"delauthtimespentatdomaincontroller": "<string>"
			}
		},
		"legacyEventType": "<string>",
		"transaction": {
			"type": "<string>",
			"id": "<string>",
			"detail": {}
		},
		"uuid": "<string>",
		"version": "<string>",
		"request": {
			"ipChain": [
				{
					"ip": "<string>",
					"geographicalContext": {
						"city": "<string>",
						"state": "<string>",
						"country": "<string>",
						"postalCode": "<string>",
						"geolocation": {
							"lat": 47,
							"lon": 51
						}
					},
					"version": "<string>",
					"source": null
				}
			]
		},
		"target": [
			{
				"id": "<string>",
				"type": "<string>",
				"alternateId": "<string>",
				"displayName": "<string>",
				"detailEntry": null
			},
			{
				"id": "<string>",
				"type": "<string>",
				"alternateId": "<string>",
				"displayName": "<string>",
				"detailEntry": null
			}
		]
	}
]
```

## Workflow Library Example

[Get Logs with Okta and Send Results Via Email](https://library.blinkops.com/workflows/get-logs-with-okta-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/get-logs-with-okta-and-send-results-via-email/canvas" />
</div>