Summary
Automox can provide logs of what actions were taken via the Console or API calls by Automox users, but these logs are not always easily readable and may require additional information to understand.
Export Audit Data
The API audit data can be exported as a CSV from the Automox console, or it can be generated from an API call. This will list API actions made by specific userIDs, the time they were done, the console URL they were on when it occurred, and some details on the API action taken.
Additional work may need to be done to tie userID and policyID values to their names. The userID and policyID numbers are listed in the URL when manually viewing the user profiles or policy pages, but the best method to gather those would be with an API export.
Access Method - Data Extracts Report
- From the Insights > Reports page, click View for Data Extracts.
- Click Generate New > API Activity.
- Enter the start date and end date for the extract you want to generate. You can generate an extract that is a maximum of 90 days.
- Click Generate.
- When the file is ready, click Download.
Access Method - API
Note: The Audit Events API can only retrieve a specific day's events at a time.
API for pulling audit events: REST API to return a subset of the audited events
- Requires your org UUID (listed on the Manage Orgs and Users page)
- Requires a date to be set.
Additional API Data
API for matching userIDs: List users that are assigned to a zone (organization)
- Requires your orgID (sometimes called Legacy Org ID): listed in your Console URL after "o="
- Requires your org accountId (listed in the Secrets & Keys page)
API for matching policyIDs: List all policy objects
- Requires your orgID (sometimes called Legacy Org ID): listed in your Console URL after "o="
Example Questions The Data Can Answer
- Who moved a device from one group to another?
- When did a restart command get sent from the console?
- Why did a device get deleted from Automox?
Additional Reference
- Data Extracts
- Automox and Reporting Your Environment
- Creating Reports
- Newbie's Guide to Getting Started with Automox API