
00uwqxphfHZZCGGKo351.5632069269073962E12 (TPICAP) asked a question.
Hi,
I am polling the Okta API with the parameters until, since, after, limit being set however sometimes one or more of the updates goes missing. This happens when I am requesting the system logs a few seconds (~30 seconds) after an update has happened in Okta. The system logs response from the API do not get filled up in the order of when those events happened but instead i get a random update in the middle of the timeframe that's missing. Is this a bug in your API because I am expecting the system logs to fill up in the order they were actioned.
If, i rerun the same request again a few minutes later the missing update appears. I would expecting the last one actioned to be missing rather then one at the start. Can anyone please explain why?
Example:
Add group A to User 1 at 10:00
Add group A to User 2 at 10:01
Add group A to User 3 at 10:02
Add group A to User 4 at 10:03
You request the system logs from 10:00 to 10:04
OKTA api returns:
Add group A to User 1 at 10:00
Add group A to User 3 at 10:02
Add group A to User 4 at 10:03

Hello,
There is no guarantee in the ordering of log events. Operations such as group add happen via a background batch job and maybe split among multiple systems.
Returning a time window too quickly may not return all of the logs from that time frame if the system has not process all the logs from all the systems.
For the logs to immediately reflect the current state of the system would be a huge performance hit. External systems should not behave/depend as though the logs are realtime, or the absolute ordering of events in the system.