GenesysCloud

Fetch audit events to see changes within a Genesys Cloud organization.

Analytics & SIEM · Genesys Cloud

Details

IDGenesysCloud
ProviderGenesys
CategoryAnalytics & SIEM
From Version8.4.0
Docker Imagedemisto/auth-utils:1.0.0.10133006
Supported ModulesXSIAM

README

Fetch audit events to see changes within a Genesys Cloud organization.
This integration was integrated and tested with version 2 of the Genesys Cloud Platform API.

Configure Genesys Cloud in Cortex

Parameter Description Required
Server URL Default value is https://api.mypurecloud.com/. False
Client ID   True
Client Secret   True
Trust any certificate (not secure)   False
Use system proxy settings   False
Fetch Events   False
Service names Ensure all selected services appear in the audit service mapping information. Possible values are: Architect, PeoplePermissions, ContactCenter, Groups, Telephony, Outbound, Routing, Integrations, AnalyticsReporting. False
Maximum number of events per service Default value is 2500. False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

genesys-cloud-get-events


Retrieves audit events from Genesys Cloud from the past 14 days. This command is intended for development and debugging purposes, as it may produce duplicate events, exceed API request rate limits, and disrupt the fetch events mechanism.

Base Command

genesys-cloud-get-events

Input

Argument Name Description Required
should_push_events If true, the command will create events, otherwise it will only display them. Possible values are: true, false. Default is false. Optional
service_name Filter by the Genesys Cloud service name. Possible values are: Architect, PeoplePermissions, ContactCenter, Groups, Telephony, Outbound, Routing, Integrations, AnalyticsReporting. Required
limit Maximum number of audit events to return. Optional
from_date The start date for retrieving events. Must be within the last 14 days. Default is 1 hour ago. Optional
to_date The end date for retrieving events. Must be within the last 14 days. Default is now. Optional

Context Output

There is no context output for this command.

Limitations

  • The genesys-cloud-get-events is only able to retrieve events from the past 14 days. Ensure both the from_date and to_date command arguments are within the last 14 days.

Configuration parameters

  • url — Server URL
  • credentials — Client ID (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • isFetchEvents — Fetch Events
  • service_names — Service names
  • max_fetch — Maximum number of events per service

Commands (1)

  • genesys-cloud-get-events

    Retrieves audit events from Genesys Cloud from the past 14 days. This command is intended for development and debugging purposes, as it may produce duplicate events, exceed API request rate limits, and disrupt the fetch events mechanism.

!genesys-cloud-get-events service_name=Routing from_date="2025-10-20T15:25:26Z" to_date="2025-10-20T16:32:33Z" should_push_events=false