Audit Logs

To access Audit Logs, you must be an Admin user. This feature is available with Paradime Security pack

Paradime offers a real-time audit log feature that allows you to keep track of user and system activities within your organization. This log shows each event as it occurs, detailing who did what and when. This information is crucial for solving access problems, conducting security checks, or looking into specific incidents.

• From the Audit Logs interface, you can look at last 30 days of events that happened within your Paradime account.

• Use the Download button to export your logs into a CSV file.

• For events beyond 30 days, you can use the Audit Logs API to extract historical data. Acc

Access Audit Logs

To access the Audit Logs in your Paradime account, navigate to Platform settings by clicking on you Avatar on the top-right corner of your screen, then choose Platform Settings. Click on the Audit Logs option in the left panel to view events happened in your Account.

Use the Audti Logs API

You can use the Audit Logs API to retrieve historical events data beyond the last 30 days. What you will need is your API_KEY , API_SECRET and API_ENDPOINT.

Check our guide here on how to generate these.

query GetAuditLogs {
    getAuditLogs {
        auditLogs {
            id
            createdDttm
            updatedDttm
            workspaceId
            workspaceName
            actorType
            actorUserId
            actorEmail
            eventSourceId
            eventSource
            eventId
            eventType
            metadataJson
        }
    }
}

Code example to fetch Audit Logs via the API

Store API credentials

As a best practice, your API credentials should be set as environment variables and should not be checked into source control. Use the API credentials generated and set the environment variables for API_KEY API_SECRET and API_ENDPOINT.

    
    export API_KEY = "generated_api_key"
    export API_SECRET = "generated_api_secret"
    export API_ENDPOINT = "generated_api_endpoint"
    

Code snippet to fetch audit logs using Paradime API

  import requests
  import os
  
  # fetch the API credentials from the environment variables
  #
  api_key = os.environ.get('API_KEY')
  api_secret = os.environ.get('API_SECRET')
  api_endpoint = os.environ.get('API_ENDPOINT')
  
  graphql_query = """
  query GetAuditLogs {
      getAuditLogs {
          auditLogs {
              id
              createdDttm
              updatedDttm
              workspaceId
              workspaceName
              actorType
              actorUserId
              actorEmail
              eventSourceId
              eventSource
              eventId
              eventType
              metadataJson
          }
      }
  }
  """
  
  response = requests.post(api_endpoint, json={"query": graphql_query}, headers={
      "Content-Type": "application/json",
      "X-API-KEY": api_key,
      "X-API-SECRET": api_secret,
  })
  print(response.json())