{groupId}

ark.get_audit_group

Expands one grouped audit timeline item into permissioned source events using the same filters.

Parameters

groupIdpathstringrequired: min length: 1; max length: 200
viewqueryAuditView
domainViewqueryAuditDomainView
qquerystring: min length: 1; max length: 200
fromquerystring: format: date-time
toquerystring: format: date-time
subjectTypequerystring: max length: 100
subjectIdquerystring: max length: 200
actorUserIdquerystring: format: uuid
actorTypequerystring: max length: 100
eventKeyquerystring: max length: 200
eventFamilyquerystring: max length: 100
visibilityClassquerystring: one of: business, security, admin, operational
sourcequerystring: max length: 100
providerquerystring: max length: 100
correlationIdquerystring: max length: 200
transactionIdquerystring
idempotencyKeyquerystring: max length: 200
requestIdquerystring: max length: 200
teamIdquerystring: format: uuid
limitqueryinteger: default: 100; min: 1; max: 250

None.

Shell

curl 'https://arktms.com/api/v1/audit/groups/<groupId>' \
  -H "Authorization: Bearer $ARK_API_TOKEN"

Audit group source events

objectstringrequired

okbooleanrequired

api_versionstringrequired

request_idstringrequired

dataobjectrequired

data.projectionVersionnumberrequired

data.groupIdstringrequired

data.rowsarray<object>required