Workspace One Audit Logs via API

[shirabendor]

Hello,

I would like to retrieve the workspace one event logs via API.

Same events that go to syslog , but instead of push to SIEM I would like to pull it via API.

Is that possible and if so, what is the API to use for it?

I would like to receive it like the CSV which is exported from the Hub for console/device events.

[maxoubilou]

Hi,

that's a good question.

How to play with API ?

An interesting blog post to know how to use Workspace ONE API => https://blog.eucse.com/workspace-one-uem-api-list-all-devices/

I suggest to use postman instead of embedded Workspace ONE API launcher.

Which URL should I choose

Currently, the better URL for our usecase will probably be the following:

/API/mdm/devices/{id}/eventlog

best regards,