topic Re: Add email address to audit logs in Dynatrace SaaS in Open Q&A

Add email address to audit logs in Dynatrace SaaS

avinashpodisett — Fri, 18 Oct 2024 09:50:38 GMT

Pain Journey: Need to write a javascript code snippet to do a look-up on audit logs to find the user email address

Benefit: having an email ID simplifies a few things. Easy to communicate and will be able to track activity

Solution Journey:

Re: Add email address to audit logs in Dynatrace SaaS

ChadTurner — Wed, 10 Jul 2024 20:58:27 GMT

This is partially completed in the UI. If you go to the entity in question and then see the revision history, you can see the email address of the changer.

This should also be present in the Json pull but you may need to split that out. There is also the services portal but that has its own limitations for the SaaS customers.

Re: Add email address to audit logs in Dynatrace SaaS

avinashpodisett — Thu, 11 Jul 2024 14:13:52 GMT

Hi Chad,
thanks for responding..we would like to go through all logs in last 7 days and find out if any users made any changes to the environment. so this solution won't work for us.
thanks again
Avi

Re: Add email address to audit logs in Dynatrace SaaS

ChadTurner — Thu, 11 Jul 2024 14:22:52 GMT

@avinashpodisett thanks for your reply, im excited to share with you that this is available via the API.

If you navigate to API V2 and select the audit logs, you can put in your time frame analysis. I put in 1 entry in the last 2 hours to cut down my query and amount of data i needed to mask.

The results will be raw, but you can ingest that into excel and break it down into the following results:

As mentioned this is really simplistic as it is login, once you pull that data set you can then massage it as needed. Exclude login/logout, include create, modify etc.... But i think this is the solution that you are seeking. You can then leverage the sorting's and filtering segments inside excel. I hope this helps 🙂 In excel I use the data ingest for Json and then break it all out collectively.

Re: Add email address to audit logs in Dynatrace SaaS

ChadTurner — Thu, 11 Jul 2024 14:26:09 GMT

If people are making changes by way of tokens, you will be stuck with Token ID's but if you have an effective naming convention you can then convert the token ID to the named owner of the token or if you created for a user, you can attribute the friendly name to the token entry.

Re: Add email address to audit logs in Dynatrace SaaS

jegron — Tue, 27 Aug 2024 09:19:22 GMT

Dynatrace now provides an application called "Privacy Rights" for storing audit logs in Grail and viewing the results: