Retrieve from an organization the SysLog legacy type of events. Examples include:
- app.user_management.grouppush.mapping.created;
- app.user_management.grouppush.updated;
- app.admin.sso.login.success;
- core.user.factor.attempt_success;
- core.user_auth.login_failed;
- app.generic.import.started;
- app.office365.api.sync.heartbeat.sent;
And so on...
You can retrieve those only by having an API token and then specifying the:
- dubdomain;
- domain;
- timeframe;
- type of legacy.events;
- nr. of events retrieved.
Note: