<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
Filter and Export Events Containing changedAttributes Fields from the Okta System Log
Okta Classic Engine
Okta Identity Engine
Lifecycle Management
Overview

This article details how to filter and export events that contain changedAttributes fields under the debugContext fields in the Okta System Log.

Most debugContext fields in the Okta System Log are not available for export via CSV, including debugContext.debugData.changedAttributes. These fields may still be used to filter and export available event fields from the filtered results through the admin console UI for System Log searches.

The System Log API may be used to retrieve additional debugContext fields not present in the default CSV report and export them.

Applies To
  • Okta System Log
  • User Attributes
Solution

To export the CSV of only events that indicate an attribute has changed, follow these steps:

  1. Go to Reports > System Log.
  2. Under the Search open field, click on the Advanced Filters link.
    Screenshot of the location for the Advanced Filters menu in Okta System Log 
  3. On the "Advanced Filters" pop-up window, search for debugContext.debugData.changedAttributes.
  4. Use "is present" in the drop-down field to search for all instances of Changed Attributes.
    NOTE: Depending on the use case, such as an org with multiple Profile Source imports, opt to add additional search filters (for example, target AppInstanceId or Okta User Id).
    Enter debugContext.debugData.changedAttributes and select is present for the operator 

  5.  Click Apply Filter.
  6. Once all entries have shown, click Download CSV on the top right of the table that displays the results.

 

Related References

 

Loading
Filter and Export Events Containing changedAttributes Fields from the Okta System Log