Unavailable. Nobody can download this version any more, with elm or with the Lamdera compiler: github.com/vanhecke/celmex is gone (deleted or private); Software Heritage not asked yet (this run's --swh-calls were used up); no fork with the same repo name found; no cached copy. Use another version.
Cortex tenant audit-log queries — both human-driven management events and agent-emitted reports.
Two endpoints, two record shapes:
search — management actions (an admin changed a setting,
an API key was created, etc.). Records have UPPERCASE-prefixed
AUDIT_* fields.
agentsReports — agent-side events (policy updates,
scan completions, errors). Records have UPPERCASE field names with
floating-point millisecond timestamps.
A SearchArgs with no filters, sort, pagination, or
timeframe.
A single audit-management event (a user/system action against the
tenant). Field names mirror the wire format's AUDIT_* UPPERCASE shape.
Paginated envelope returned by search.
A single agent report (an event emitted by an installed XDR agent). Field names mirror the wire format's UPPERCASE shape. Timestamps are emitted as floating-point milliseconds (not integers).
Paginated envelope returned by agentsReports.
POST /public_api/v1/audits/management_logs
Retrieve audit management logs. Filters, pagination and timeframe are
carried in SearchArgs; pass
defaultSearchArgs to get all results.
POST /public_api/v1/audits/agents_reports
Retrieve agent-emitted reports — policy updates, scan completions, error notifications, etc. Each row carries timestamps as floating-point milliseconds.
Arguments to
search. All fields are optional; passdefaultSearchArgsfor an unfiltered request.extrais merged last intorequest_dataand overrides any SDK-generated key on collision.