Actions182
- Address Block Actions
- Audit Log Actions
- Auth Profile: LDAP Actions
- Auth Profile: OIDC Actions
- Auth Profile: SAML Actions
- CDC Application Actions
- CDC Destination: HTTP Actions
- CDC Destination: Splunk Actions
- CDC Destination: Syslog Actions
- CDC Host Actions
- Custom API Request Actions
- DFP Service Actions
- DHCP Fingerprint Actions
- DHCP Lease Actions
- DNS Event Actions
- DNS Record Actions
- DNS Zone Actions
- Endpoint Device Group Actions
- Endpoint Roaming Device Actions
- Endpoint VPN Profile Actions
- Fixed Address Actions
- Global Search Actions
- Identity: Compartment Actions
- Identity: Group Actions
- Identity: User Actions
- Infrastructure Host Actions
- Infrastructure Service Actions
- IP Address Actions
- IP Space Actions
- IPAM Range Actions
- Location Actions
- Lookalike Domain Actions
- Lookalike Target Actions
- NIOS Custom API Request Actions
- NIOS WAPI Object Actions
- NTP Service Config Actions
- Redirect: Custom Redirect Actions
- Service Log Actions
- SOC Insight Actions
- Subnet Actions
- TD Access Code Actions
- TD Application Filter Actions
- TD Category Filter Actions
- TD Internal Domain List Actions
- TD Named List Actions
- TD Scheduled Report Actions
- TIDE Batch Actions
- TIDE Dossier Lookup Actions
- TIDE Threat Actions
Audit Log → Get Many
AI-generatedSummary
Retrieves Infoblox Portal audit log entries from the /api/auditlog/v1/logs endpoint, optionally filtered server-side, returning either up to a limit or all entries.
Inputs
- Return All — When true, pages through all results (100 per page using _limit/_offset) until a short page is returned. Default false.
- Limit — Max entries to return (min 1, default 50). Shown only when Return All is false; sent as
_limit. - Filter Expression — Infoblox
_filterexpression applied server-side, e.g.name=="default". Empty returns all records. - Query Parameters — Extra name/value query-string pairs added to the request, e.g.
_fieldsor_order_by. Filter Expression overrides a manually set_filterhere.
Output shape
One output item per audit log entry, extracted from the response's results/result/items/data array (or the array itself).
If the response contains no recognizable list, the raw response is returned as a single item. With Continue On Fail, errors are emitted as an item with an
errorfield. Requires Infoblox CSP API credentials.
Examples
Example 1: Fetch the 50 most recent-style audit entries for review
Return All off, Limit 50, no filter.
Example 2: Export all audit entries matching a filter to a SIEM
Return All on, Filter Expression set to a _filter string, e.g. on user or action field.