Skip to content

You are viewing documentation for Immuta version 2024.1.

For the latest version, view our documentation for Immuta SaaS or the latest self-hosted version.

Download Audit Logs

Audience: System Administrators, Data Owners, and users with the AUDIT permission

Content Summary: This page outlines how to download the audit logs for your instance of Immuta through the API.

Deprecation notice

Support for the audit endpoint has been deprecated. Instead, pull audit logs from Kubernetes and push them to your SIEM.

1 - Generate an API Key

  1. Generate your API key on the API Keys tab on your profile page and save the API key somewhere secure.
  2. You will pass this API key in the authorization header when you make a request, as illustrated in the example below:

    curl \
        --request GET \
        --header "Content-Type: application/json" \
        --header "Authorization: dea464c07bd07300095caa8" \
        https://your-immuta-url.immuta.com/audit
    

2 - Download Your Audit Logs

Endpoint

Method Path Purpose
GET /audit Gets the audit records for the instance of Immuta.

Query Parameters

Attribute Description Required
dataSourceId array[integer] Returns records for the data source with the specified ID. No
projectId array[integer] Returns records for the project with the specified ID. No
profileId array[integer] Returns records for the user with the specified profile ID. No
recordType string Returns the type of audit record specified. See recordTypes in the response example below for details. No
outcome string Returns records based on the specified outcome: success, userError, systemError, insufficientAuthorizations, failure, or insufficientPermissions. No
minDate date The date of the oldest audit record to include. No
maxDate date The date of the most recent audit record to include. No
blobId string Returns audit records for the specified blobId. No
purpose integer Returns audit records for the purpose with the specified ID. No
offset integer Used in combination with size to fetch pages. Example: "size=10&offset=10" would return the second page or "size=10&offset=20" would return the third page. No
size integer The number of results to return per page. Default is 50. No
sortField string Sorts the records by the specified field. Default is dateTime. No
sortOrder string Sorts records in ascending (asc) or descending (desc) order. Default is desc. No

Response Parameters

The response returns the audit records. See below for an example.

Request Example

The request below saves 50 audit logs for https://your-immuta-url.immuta.com in the file audit-logs-file.son, with the audit records sorted by time in descending order.

curl \
    --request GET \
    --header "Content-Type: application/json" \
    --header "Authorization: dea464c07bd07300095caa8" \
    --output audit-logs-file.json \
    https://your-immuta-url.immuta.com/audit?sortField=dateTime&sortOrder=desc

Response Example

{
  "hits": [{
    "dateTime": "1634144773832",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "29cfa243-5ca9-44a3-8600-35897e13f6fb",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634144525716",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "eea78076-4362-4563-aa3d-52f91eb87da1",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634144482422",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "3ede9275-434e-451e-9166-c2979162b2d0",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634144402132",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "authenticate",
    "blobId": null,
    "userId": "postgres_system",
    "profileId": -1,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "774e50ac-7256-4f7a-8549-2fce65fc4a4a",
    "fingerprintVersionName": null,
    "email": null
  }, {
    "dateTime": "1634144332521",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "dc449dc3-1a38-4fcc-860b-14bcdca50ca0",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634144274492",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "cfad6adf-c734-43a4-be00-bf75c4ab2f7f",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634144170871",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "3aa0a81b-0079-4c9b-8a4c-3e7416578f26",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634144112457",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "b932e672-2d58-4fb7-86cc-26d3c5261526",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634144023606",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "e8acc422-a018-4d92-86b6-922994906105",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634143988892",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "ca52c9ac-0997-4d3d-8ce8-d73acb7313df",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634143739542",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "eaf1c1e7-2ef4-4c71-9114-9b69a35b543e",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634143712696",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "authenticate",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "580bc995-efa6-443e-8507-3736c930d6bd",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634138752546",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "handleTask",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "8718e9f1-3c04-4107-8875-8355a404b314",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634138602535",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "authenticate",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "40e9bc73-404b-4ede-9bd0-69ebd5aa211c",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634136717974",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "authenticate",
    "blobId": null,
    "userId": "postgres_system",
    "profileId": -1,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "d11eae77-788e-4ec2-baa5-7a082d3ffed5",
    "fingerprintVersionName": null,
    "email": null
  }, {
    "dateTime": "1634079780159",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "authenticate",
    "blobId": null,
    "userId": "postgres_system",
    "profileId": -1,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "3588c9bf-e4a2-436f-94dd-0d2330f6fdb7",
    "fingerprintVersionName": null,
    "email": null
  }, {
    "dateTime": "1634067298603",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "07246b92-090d-4a5a-a8e7-7b488ee70b9e",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634067297104",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "cb582e19-f1f3-41fe-a09e-3a5ac309b8b7",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634067294907",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "4972ea2c-bbe9-499c-84be-85d7a5c374af",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634067294126",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "7faeb85f-d372-4c7c-bda5-87260247a701",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634067293686",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "a90cd25a-044a-4cea-8919-39d7c8a429fc",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634067290827",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "9d37b7dd-6b04-4dbb-8852-a10007943c6b",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634067287997",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "9208fb13-9d33-4dc3-a550-f6b8ae70ed8e",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634067273092",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "91c9db98-bd19-4afc-b590-05d139cb3b32",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634067055915",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "taskDelete",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "5896ab8a-c71f-49a2-9279-ec6bb0b00c85",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066885023",
    "dataSourceName": "Fake Medical Claims 2017",
    "projectName": null,
    "recordType": "queryDebugRequest",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "c929758b-60ce-48d2-9fdd-f33864e97330",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066884662",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "sqlQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "975c39ec-b0a4-4ac5-baa1-504f8e736a5e",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066621722",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "sqlQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "1c5cf9c7-4530-4e58-9475-a68257e53c6a",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066606932",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "7e5a5366-81d5-4306-8561-4ea0fe8bf09c",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066600664",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "auditQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11, 17],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "65b05960-72bf-4bfe-8e7d-5e1efb9678ab",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066596494",
    "dataSourceName": "Fake Medical Claims 2017",
    "projectName": null,
    "recordType": "sqlQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": false,
    "id": "a1af3329-d096-4cc0-8037-10b63d437dac",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066592672",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "switchCurrentProject",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "9b457b86-256b-4c39-8c32-a9f346f78fde",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066586204",
    "dataSourceName": "Fake Medical Claims 2017",
    "projectName": null,
    "recordType": "sqlQuery",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": false,
    "failureReason": null,
    "warning": false,
    "id": "ced83fec-9518-424f-80d6-190dfdecf8ce",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066290381",
    "dataSourceName": "Fake Medical Claims 2017",
    "projectName": null,
    "recordType": "policyHandlerUpdate",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11, 17],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "4de17c25-875d-412c-bd35-7346eb86c9fe",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634066290361",
    "dataSourceName": "Fake Medical Claims 2017",
    "projectName": null,
    "recordType": "dataSourceSave",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "3b79e204-70ff-4271-85ac-ac46042374e6",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065931127",
    "dataSourceName": "Army Army Records",
    "projectName": "Purpose Test",
    "recordType": "addToProject",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11, 17],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "c8c2ba1b-dc8e-4d4d-aa89-cdb3cfb81dae",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065922108",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11, 17],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "6614f079-4508-4ee2-ab6f-1e026da9eaec",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065904373",
    "dataSourceName": "Army Army Records",
    "projectName": null,
    "recordType": "policyHandlerCreate",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11, 17],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "3021888b-1990-4330-9c58-b9f471fd0c15",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065904353",
    "dataSourceName": "Army Army Records",
    "projectName": null,
    "recordType": "dataSourceSave",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "11514fd6-5409-45b0-9bb2-8f27ec51fce9",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065649381",
    "dataSourceName": null,
    "projectName": "Purpose Test",
    "recordType": "acknowledgePurposes",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11, 17],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "81381227-2b5d-4e8d-8dc8-d7292518054a",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065648353",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11, 17],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "e6bbc894-4acd-43e1-92e4-cc7f12493001",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065647986",
    "dataSourceName": null,
    "projectName": "Purpose Test",
    "recordType": "projectUpdate",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11, 17],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "b6fb9802-eb3d-46dd-8fa2-397a6bb562b2",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065644190",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "purposeCreate",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "d8a670b4-b649-4a58-9511-a68b755bb4fc",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065626925",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "22037907-acb7-46b6-bb54-6bcfe4ff7e47",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065594293",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "0ad0aa26-ec6c-4aa9-a9ed-289153cb29ae",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065589401",
    "dataSourceName": null,
    "projectName": "Purpose Test",
    "recordType": "switchCurrentProject",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": [11],
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "1d486411-10e3-4fe8-be32-ac67a78817ff",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065558756",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "c2b08363-3d79-44dd-8150-96c06f9b43ec",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065549471",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "82f5eb8a-406f-4a02-adb8-6ab00f9b94b8",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065502102",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "9ecee444-25ae-4891-8d8d-98700d396107",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }, {
    "dateTime": "1634065481461",
    "dataSourceName": null,
    "projectName": null,
    "recordType": "apiKey",
    "blobId": null,
    "userId": "katie@example.com",
    "profileId": 2,
    "purposeIds": null,
    "success": true,
    "failureReason": null,
    "warning": null,
    "id": "834c288a-1d98-4602-a9f1-fdcf2a1ce101",
    "fingerprintVersionName": null,
    "email": "katie@example.com"
  }],
  "facets": {
    "datasources": [{
      "name": "Public Credit Accounts",
      "id": 1,
      "count": "150"
    }, {
      "name": "Public Fake Medical Claims 2017",
      "id": 3,
      "count": "37"
    }, {
      "name": "Public Credit Transactions",
      "id": 2,
      "count": "33"
    }, {
      "name": "Dbo Customer Data",
      "id": 26,
      "count": "16"
    }, {
      "name": "Customers",
      "id": 30,
      "count": "16"
    }, {
      "name": "Army Army Records",
      "id": 42,
      "count": "15"
    }, {
      "name": "Immuta System Profiles",
      "id": 17,
      "count": "13"
    }, {
      "name": "Fake Medical Claims 2017",
      "id": 47,
      "count": "12"
    }, {
      "name": "Cities",
      "id": 49,
      "count": "11"
    }, {
      "name": "User 1 Data Source: Fake Medical Claims 2017",
      "id": 52,
      "count": "8"
    }, {
      "name": "Default Hp Sample Struct (deleted)",
      "id": 8,
      "count": "7"
    }, {
      "name": "Public Uciml Census Income Enriched",
      "id": 4,
      "count": "7"
    }, {
      "name": "Immuta System Version",
      "id": 16,
      "count": "5"
    }, {
      "name": "Dbo Employee Data",
      "id": 27,
      "count": "5"
    }, {
      "name": "dev (deleted)",
      "id": 18,
      "count": "5"
    }, {
      "name": "Dbo Healthcare Data",
      "id": 28,
      "count": "5"
    }, {
      "name": "Default Applicant Data (deleted)",
      "id": 7,
      "count": "4"
    }, {
      "name": "Default Hp Sample Struct (deleted)",
      "id": 14,
      "count": "4"
    }, {
      "name": "Default Struct Test (deleted)",
      "id": 15,
      "count": "4"
    }, {
      "name": "Default Struct Array Map (deleted)",
      "id": 13,
      "count": "4"
    }, {
      "name": "Default Struct Test (deleted)",
      "id": 11,
      "count": "4"
    }, {
      "name": "Matrix (deleted)",
      "id": 21,
      "count": "4"
    }, {
      "name": "Default Patient 193200000x (deleted)",
      "id": 9,
      "count": "4"
    }, {
      "name": "Default Synth Patients Covid (deleted)",
      "id": 12,
      "count": "4"
    }, {
      "name": "Sample Data Source",
      "id": 46,
      "count": "4"
    }],
    "projects": [{
      "name": "Test Project Purpose",
      "id": 5,
      "count": "32"
    }, {
      "name": "API Test",
      "id": 14,
      "count": "16"
    }, {
      "name": "demo-api",
      "id": 3,
      "count": "10"
    }, {
      "name": "Project Created through the API",
      "id": 15,
      "count": "9"
    }, {
      "name": "Purpose Test",
      "id": 17,
      "count": "7"
    }, {
      "name": "Test5",
      "id": 10,
      "count": "2"
    }],
    "recordTypes": [{
      "name": "authenticate",
      "count": "99"
    }, {
      "name": "dataSourceSubscription",
      "count": "98"
    }, {
      "name": "dataSourceSave",
      "count": "86"
    }, {
      "name": "apiKey",
      "count": "77"
    }, {
      "name": "sqlQuery",
      "count": "70"
    }, {
      "name": "dataSourceCreate",
      "count": "52"
    }, {
      "name": "dataSourceDelete",
      "count": "44"
    }, {
      "name": "licenseCreate",
      "count": "40"
    }, {
      "name": "globalPolicyRemoved",
      "count": "32"
    }, {
      "name": "globalPolicyDisabled",
      "count": "28"
    }, {
      "name": "policyImport",
      "count": "28"
    }, {
      "name": "policyHandlerUpdate",
      "count": "24"
    }, {
      "name": "auditQuery",
      "count": "21"
    }, {
      "name": "acknowledgePurposes",
      "count": "20"
    }, {
      "name": "projectSubscription",
      "count": "18"
    }, {
      "name": "tagAdded",
      "count": "17"
    }, {
      "name": "projectUpdate",
      "count": "16"
    }, {
      "name": "globalPolicyApplied",
      "count": "16"
    }, {
      "name": "licenseDelete",
      "count": "14"
    }, {
      "name": "purposeCreate",
      "count": "13"
    }, {
      "name": "addToProject",
      "count": "13"
    }, {
      "name": "policyExport",
      "count": "12"
    }, {
      "name": "globalPolicyUpdate",
      "count": "11"
    }, {
      "name": "globalPolicyCreate",
      "count": "11"
    }, {
      "name": "policyHandlerCreate",
      "count": "11"
    }],
    "users": [{
      "name": "katie@example.com",
      "id": 2,
      "count": "892"
    }, {
      "name": "user@example.com",
      "id": 3,
      "count": "55"
    }, {
      "name": "immuta_system_account",
      "id": 1,
      "count": "5"
    }, {
      "name": "azure blob storage_indexer_19",
      "id": 5,
      "count": "1"
    }, {
      "name": "azure blob storage_indexer_18",
      "id": 4,
      "count": "1"
    }],
    "outcomes": [{
      "name": "success",
      "count": "828"
    }, {
      "name": "userError",
      "count": "99"
    }, {
      "name": "systemError",
      "count": "16"
    }, {
      "name": "failure",
      "count": "8"
    }, {
      "name": "insufficientAuthorizations",
      "count": "2"
    }, {
      "name": "insufficientPermissions",
      "count": "1"
    }]
  },
  "minDate": "2021-09-09T13:47:30.914Z",
  "maxDate": "2021-10-13T17:06:13.832Z",
  "count": 1110
}