Querying search fields available in reports
Querying search fields available in reports request
curl --cookie cookies.txt --request GET https://<IP-address-of-SPS>/api/configuration/reporting/_available_search_fields |
Querying search fields available in reports response
{ |
"body": { |
"event": { |
"fields": [ |
{ |
"description": "The command line without prompt in commands", |
"field": "action", |
"name": "Event Action", |
"presentable": true, |
"searchable": true, |
"type": "string" |
}, |
{ |
"description": "The id of the channel the event belongs to.", |
"field": "channel_id", |
"name": "Channel ID", |
"presentable": true, |
"searchable": true, |
"type": "string" |
}, |
{ |
"description": "The command executed, or the window title detected in the channel (for example, ls, exit, or Firefox).", |
"field": "content", |
"name": "Event content", |
"presentable": true, |
"searchable": true, |
"type": "string" |
}, |
{ |
"description": "The details of the protocol used for the operation.", |
"field": "details", |
"name": "Protocol details", |
"presentable": true, |
"searchable": true, |
"type": "string" |
}, |
{ |
"description": "The identifier of the vault event.", |
"field": "event_id", |
"name": "Event ID", |
"presentable": true, |
"searchable": true, |
"type": "string" |
}, |
{ |
"description": "The type of the operation that occurred, for example, Create file (in the case of FTP) or GET (in the case of HTTP).", |
"field": "operation", |
"name": "Operation", |
"presentable": true, |
"searchable": true, |
"type": "string" |
}, |
{ |
"description": "The path (if any) used by the operation that occurred.", |
"field": "path", |
"name": "Path", |
"presentable": true, |
"searchable": true, |
"type": "string" |
}, |
{ |
"description": "The identifier of the event within the audit trail (.zat file).", |
"field": "record_id", |
"name": "Event ID", |
"presentable": true, |
"searchable": true, |
"type": "long" |
}, |
{ |
"description": "The status code of the protocol response (if any) returned.", |
"field": "response_code", |
"name": "Response code", |
"presentable": true, |
"searchable": true, |
"type": "long" |
}, |
{ |
"description": "The date when the event happened.", |
"field": "time", |
"name": "Event date", |
"presentable": false, |
"searchable": true, |
"type": "date" |
}, |
{ |
"description": "The type of the event, for example, command, screen_content, window_title.", |
"documentation": "https://support.oneidentity.com/one-identity-safeguard-for-privileged-sessions/technical-documents", |
"field": "type", |
"name": "Event type", |
"presentable": true, |
"searchable": true, |
"type": "string" |
} |
] |
} |
} |
} |