How to Find API Tokens Activity in System Logs
Sep 24, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
This document helps in understanding how to find actions made by a specific API Token.
Applies To
- API Token
- System Logs
Solution
If one is looking for the actions that were done by a specific API Token, if no recent ones can be found, it will be necessary to create an event using that token. As soon as the event is created, the RequestApiTokenId can be found by looking into the system logs and extending the event.
Using the ID, all the actions that were done by that specific Token can be found in the system logs.
NOTE: Any API token usage that does not create a system log event, including GET API calls, can not be tracked. The only API call actions that can be tracked are the PUT, POST, and DELETE.
