Overview
This guide presents how to search the System Log using the Okta—Search System Logs card in Workflows.
Solution
The System Log contains all logged events for an organization, including user authentication, password resets, rate limit errors, user lifecycle information, and any other activity within the Okta organization.
Okta System Log.
Okta Workflows has the Okta—Search Systems Logs card to search the System Log.
Okta—Search System Logs card.
The Search System Logs card has fields to help with searching.
Search System Logs fields.
Is recommended to use the Custom Filter field for greater flexibility.
Searching the System Log.
Find one event in the System Log to help build the query above. Expand the event keys, such as Event and Outcome, to help find the necessary values and create the query. Also, click the copy icon next to Expand All to copy the entire event JSON.
System Log event.
Create a filter using the event information.
Advanced filters wizard.
The search query will be available after clicking Apply Filter.
Searching the System Log with a query.
Copy and paste the search query inside the Okta—Search System Logs card in Workflows.
Okta—Search System Logs card with a query.
If a Since date is not specified, the default value is 7 days prior (docs).
When searching the System Log, we advise creating a query in the Okta dashboard and then using the query with a Workflows card.
Related References
