This article explains the System Log behavior for read-only API calls and the API token activity timestamp updates.
- Okta System Log
- API Tokens
The Okta System Log only records API calls that modify data, such as PUT, POST, or DELETE requests. Read-only (GET) API calls are not logged by design and do not appear in the System Log or in the View token activity section.
However, Okta records attempted requests as recent activity in the Admin Console. This updates the Last used or updated section, even if the call is denied by a network zone restriction and no log entry is generated.
Once revoked, any further attempts to use the API token will fail, and no new activity should appear.
