After an Active Directory (AD) import completes, the Import Monitoring tab displays the number of updated users. To view the exact attributes updated during the import, query the System Log using the specific transaction ID.
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Active Directory (AD) Imports
How are the updated attributes after an AD import viewed in the Okta System Log?
Locate the import in the Import Monitoring tab, extract the transaction ID from the System Log, and run a custom search query to view the specific attribute changes for each user, as detailed in the video demonstration or the written instructions.
- Navigate to Reports > Import Monitoring and locate the import.
- Select View under the Logs column to open the System Log.
- Copy the Transaction ID populated in the search query and save the value for later use.
- Enter the following query into the search bar, replacing
<transactionID>with the copied Transaction ID:
transaction.id eq "<transactionID>" and eventType eq "application.user_membership.update"
- Execute the search to view the log entries containing the attributes changed by the import.
- Select a log entry and choose Expand All to view the details for a specific user.
- Navigate to Event > System > DebugContext > DebugData > ChangedAttributes to view the modified attributes.
NOTE: Not allapplication.user_membership.updateentries contain attribute changes. If theDebugDatais empty and theLegacyEventTypestatesapp.generic.config.app_user_property_update, the events relate to configuration property updates.
- Repeat steps 6 and 7 for each user.
