Actions75
- EndpointAutopilot Actions
- TenantAdministrationAlerts Actions
- EndpointMEM Actions
- TenantGDAP Actions
- TenantAdministrationApplicationApproval Actions
- TenantAdministration Actions
- CIPPSetup Actions
- Security Actions
- IdentityAdministrationDevices Actions
- CIPPExtensions Actions
- EmailExchangeTools Actions
TenantAdministrationAlerts → ListAuditLogSearches
AI-generatedOverview
This node interacts with the Tenant Administration Alerts API to list audit log searches. It supports fetching either all results or a single page of audit log searches for a specified tenant domain or all tenants in a multi-tenant environment. The node allows filtering by tenant domain and additional optional fields such as days, search ID, and type. It handles pagination and supports custom request options like headers, query filters, batching, and timeout settings.
Use Case Examples
- An IT administrator wants to retrieve all audit log searches performed across all tenants to monitor security events.
- A security analyst needs to fetch audit log searches for a specific tenant domain to investigate suspicious activities.
Properties
| Name | Meaning |
|---|---|
| Return All | Whether to return all results or only a single page. When disabled, no pagination parameters are sent and only one page of results is returned. |
| Tenant Filter | Target tenant domain or 'AllTenants' for multi-tenant operations. |
| Additional Fields | Optional filters for the audit log searches such as days, search ID, and type. |
Output
JSON
json- The JSON response containing the list of audit log searches.
Dependencies
- An API key credential for authenticating with the CIPP API.
Troubleshooting
- Ensure the tenant filter is correctly specified and has the necessary permissions to access audit log searches.
- Check API rate limits and use batching or request intervals to avoid throttling.
- Enable debug mode to see the actual request details if the API call fails.