Reading audit logs in the Management API

[SecNetEng]

Since show-administrators (I'm using the Web API) does not show a last login date, I need to search the audit logs.

show-administrators: https://sc1.checkpoint.com/documents/latest/APIs/index.html?#web/show-administrators~v1.9

The only logs available are under show-logs

show-logs: https://sc1.checkpoint.com/documents/latest/APIs/index.html?#web/show-logs~v1.9

I cannot seem to find how to view the audit logs.

Is there an undocumented feature to read this logs?

MDS R81.10

[PhoneBoy]

The show-logs API is only for Access Logs as far as I know.
Not sure there is an endpoint for Audit Logs… @Omer_Kleinstern ?

[Amir_Senn · Accepted solution]

Use type audit in your query.

 

[SecNetEng]

I confirmed this is working. Thank you @Amir_Senn