This article describes how to search in the system log (syslog) for actions taken by Okta Workflows.
- Okta Workflows
- System log
Use the following syslog query from the Okta Admin Console > Reports > System Log tab to filter for actions taken by Okta Workflows at runtime:
client.userAgent.rawUserAgent eq "Azuqua"
Some examples of actions this query will show:
- Workflows creates a new user
- Workflows updates a user
- Workflows adds a group or app
- Workflows removes a group or an app
For actions that occur at design time from within the Workflows console, like creating or saving a flow, the system logs can be searched by event type. The Okta Workflows Event Types can be found in the Okta Developer Reference documentation. The following syslog query uses the "sw" (starts with) operator to find all Workflows events during the date range specified for the query:
eventType sw "workflows.user"To search for specific design-time actions, use the "eq" (equals) operator and the exact event name:
eventType eq "workflows.user.flow.save"
