<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D51Y00006N4UV6SANOkta Classic EngineAdministrationAnswered2024-04-24T06:24:28.000Z2019-06-21T15:32:26.000Z2019-07-23T23:16:37.000Z

RonZ.94926 (Customer) asked a question.

June 21, 2019 at 3:32 PM
Can I use logs to find new users added by import

We have auto import on but not auto confirm due to a messy AD structure. Auto confirm would result in service accounts being added to Okta, we only one real people. Is there a way to find the last users added by an import so I can see if it's a real person and confirm them. I have 1800 imported users to review to look for real people. I get an email everytime the import runs, if it shows a new user added I'd like to be able to find that new user in the 1800 easily. I don't know of a filter I can apply to the logs to do that.

In the meantime I will submit a an idea to allow sorting of the Imported users by date and time they were imported, that would solve the issue as well.

  • 4 answers
  • 1.21K views

  • VanH.30758 (Lytx, Inc.)

    Try:

    displayMessage eq "Create user triggered by import process"

    or

    displayMessage eq "Create user triggered by import process" and eventType eq "system.import.user.create"

     

    That's what I use. To be more specific I use one that creates based off our AD integration, but I think my ID would different than yours.

     

    Here's what mine looks like:

    displayMessage eq "Create user triggered by import process" and target.id eq "<random letters and numbers>"

    Expand Post
    Selected as Best

  • VanH.30758 (Lytx, Inc.)

    Try:

    displayMessage eq "Create user triggered by import process"

    or

    displayMessage eq "Create user triggered by import process" and eventType eq "system.import.user.create"

     

    That's what I use. To be more specific I use one that creates based off our AD integration, but I think my ID would different than yours.

     

    Here's what mine looks like:

    displayMessage eq "Create user triggered by import process" and target.id eq "<random letters and numbers>"

    Expand Post
    Selected as Best

  • RonZ.94926 (Customer)

    I tried displayMessage eq "Create user triggered by import process" and eventType eq "system.import.user.create" and that seems to show me what I need. Thanks so much for the information.

  • RonZ.94926 (Customer)

    Thanks for the information, it works perfectly. Is there a similar string to show me which accounts were updated as a result of an import? I tried changing the first word from Create to Update and other variations such as Change, Updated, Modified, none work. I'd like to be able to see what accounts were updated on an import too.

  • RonZ.94926 (Customer)

    I think I got it, I dropped the "and eventType eq "system.import.user.create"" and then changed Create to Update.

     

This question is closed.
Loading
Can I use logs to find new users added by import