timeline

ark.get_audit_timeline

Returns the permissioned grouped audit timeline projection for a selected view, domain, date range, and current filters.

Parameters

viewqueryAuditView
domainViewqueryAuditDomainView
qquerystring: min length: 1; max length: 200
fromquerystring: format: date-time
toquerystring: format: date-time
subjectTypequerystring: max length: 100
subjectIdquerystring: max length: 200
actorUserIdquerystring: format: uuid
actorTypequerystring: max length: 100
eventKeyquerystring: max length: 200
eventFamilyquerystring: max length: 100
visibilityClassquerystring: one of: business, security, admin, operational
sourcequerystring: max length: 100
providerquerystring: max length: 100
correlationIdquerystring: max length: 200
transactionIdquerystring
idempotencyKeyquerystring: max length: 200
requestIdquerystring: max length: 200
teamIdquerystring: format: uuid
cursorOccurredAtquerystring: format: date-time
cursorIdquerystring: format: uuid
limitqueryinteger: default: 50; min: 1; max: 100

None.

Shell

curl 'https://arktms.com/api/v1/audit/timeline' \
  -H "Authorization: Bearer $ARK_API_TOKEN"

Audit timeline

objectstringrequired

okbooleanrequired

api_versionstringrequired

request_idstringrequired

dataobjectrequired

data.projectionVersionnumberrequired

data.viewobjectrequired

data.filtersobjectrequired

data.rowsarray<object>required

data.facetsarray<object>

data.rangeSummaryobject

data.pageInfoobjectrequired