Repeated Report CSV Export Downloaded Events Appear in the Okta System Log

Repeated "Report CSV Export Downloaded" events appear in the Okta System Log for the exact same report file Identifier (ID). This occurs when a web browser automatically re-fetches a previous download link from an open tab or download history. Resolve this issue by closing background tabs, clearing the browser download history, and restarting the browser.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• System Log
• Reports

An open or pinned tab from an original report download remains open in the web browser. When the browser restores tabs or re-renders background tabs, it sends a fresh background request to the download link. Okta logs a new event each time the browser sends a request. Additionally, if the download entry remains in the browser download history, the browser periodically polls or attempts to re-fetch the resource in the background.

How do administrators stop the web browser from triggering new events?

Stop the web browser from triggering new events by closing background tabs, clearing the download list, and restarting the browser.

1. Close any open or background Okta Report tabs in the Google Chrome browser.
2. Open Google Chrome and navigate to chrome://downloads.
3. Clear the download history or remove the entry for the specific Comma-Separated Values (CSV) file.
4. Restart the Google Chrome browser.

Verify the Security of the Exported Report

Confirm that no unauthorized export is occurring by reviewing the Okta System Log.

• Review the Okta System Log entries to confirm that the user did not generate or export a new report.
• Verify that every event references the exact same report file ID and originates from the same browser session under the user account.