Return security events (recorded by the Record Security Event brick and the policy-driven clipboard/URL-block/file-upload/protected-field enforcers) over the reporting window, newest first, for a member (user) or across one or more groups (groups), else the whole organization. Optional category / severity / action / destination query params filter the list; the response also includes per-category, per-severity, per-action, and top-destination (file-upload report) counts over the full window. Restricted to organization admins/managers and gated by the activity-tracking flag.
Query parameters
UUID of the organization to scope the report to.
Optional member UUID to scope the report to one user.
Optional group UUIDs to scope the report; repeated (?groups=a&groups=b) or comma-separated (?groups=a,b).
Optional ISO-8601 start of the report window (inclusive).
Optional ISO-8601 end of the report window (exclusive).
Optional maximum number of rows to return.
Optional security-event category to filter the list by.
Optional security-event severity to filter the list by.
Optional graduated-action (monitor/warn/block/softBlock) to filter the list by.
Optional file-upload destination to filter the list by.
Optional Interaction-Matching precision (L0/L1/L2) to filter the list by.
Changes
No recorded changes to this endpoint across all 1 revision of this API.