ExportAuditLogsToFile

Uses the Core REST API integration to query the server audit trail logs, and return back a CSV or JSON file.

Details

ID	`ExportAuditLogsToFile`
Language	python
From Version	6.5.0
Docker Image	`demisto/python3:3.12.13.10404775`
Tags	Utility

README

Uses the Core REST API integration to query the server audit trail logs, and return back a CSV or JSON file.

Script Data

Name	Description
Script Type	python3
Tags	Utility

Dependencies

This script uses the following commands and scripts.

core-api-post

Inputs

Argument Name	Description
days_back	How many days back to fetch for, supports 1,2,3 or 7 days back.
output	Type of File to return, either JSON, or CSV

Outputs

There are no outputs for this script.

Source

ExportAuditLogsToFile.py ExportAuditLogsToFile_test.py ExportAuditLogsToFile.yml

Download History Raw

args:
- auto: PREDEFINED
  description: How many days back to fetch for, supports 1,2,3 or 7 days back.
  name: days_back
  predefined:
  - "1"
  - "2"
  - "3"
  - "7"
  required: true
- auto: PREDEFINED
  defaultValue: csv
  description: Type of File to return, either JSON, or CSV.
  name: output
  predefined:
  - csv
  - json
comment: Uses the Core REST API integration to query the server audit trail logs, and return back a CSV or JSON file.
commonfields:
  id: ExportAuditLogsToFile
  version: -1
contentitemexportablefields:
  contentitemfields:
    fromServerVersion: ""
dependson:
  must:
  - core-api-post
dockerimage: demisto/python3:3.12.13.10404775
enabled: true
name: ExportAuditLogsToFile
runas: DBotWeakRole
script: ''
scripttarget: 0
subtype: python3
tags:
- Utility
type: python
fromversion: 6.5.0
marketplaces:
- xsoar
- marketplacev2
- platform
supportedModules:
- agentix
- cloud
- cloud_runtime_security
- cloud_posture
- xsiam
- edr
tests:
- No tests (auto formatted)