args:
- auto: PREDEFINED
  description: How many days back to fetch for, supports 1,2,3 or 7 days back.
  name: days_back
  predefined:
  - "1"
  - "2"
  - "3"
  - "7"
  required: true
- auto: PREDEFINED
  defaultValue: csv
  description: Type of File to return, either JSON, or CSV.
  name: output
  predefined:
  - csv
  - json
comment: Uses the Core REST API integration to query the server audit trail logs, and return back a CSV or JSON file.
commonfields:
  id: ExportAuditLogsToFile
  version: -1
contentitemexportablefields:
  contentitemfields:
    fromServerVersion: ""
dependson:
  must:
  - core-api-post
dockerimage: demisto/python3:3.12.13.10404775
enabled: true
name: ExportAuditLogsToFile
runas: DBotWeakRole
script: ''
scripttarget: 0
subtype: python3
tags:
- Utility
type: python
fromversion: 6.5.0
marketplaces:
- xsoar
- marketplacev2
- platform
supportedModules:
- agentix
- cloud
- cloud_runtime_security
- cloud_posture
- xsiam
- edr
tests:
- No tests (auto formatted)