Skip to content

Okta Filtered Logs

The Okta Filtered Logs Application is a more specialized version of our Okta Identity.

It is meant to help you track information regarding a specific filter query of your logs. To use it, you need to log in to the Okta Dashboard with your okta account.

Then, navigate to Reports > System Log on the left sidebar. This page allows you to build a custom query with the filters that you want. You can check the returned event logs at the bottom.

Once you have built your query, copy your current URL, you will need it to integrate with SenHub.

Options

  • Name*: Just a simple label to find it easier in the SenHub's interface
  • Description: Description for your own usage only.
  • Vault*: Select the appropriate vault for this resource from the modal.
  • Group: optional — assign this instance to a group to organise it within SenHub.
  • Url*: Here, paste the URL that you copied before, it will be used to fetch your events logs
  • Period*: This determines the time period for returned results (Okta deletes logs after 3 months).

You can also use your Okta System Log API query for the Url field, in place of the URL you got on your dashboard (it begins with /api/v1/logs).

Careful: SenHub cannot list more than 20,000 events per query, due to Okta's API technical limitations.

Example output

For the configured filter query and period, the connector returns a single metric: the number of Okta System Log events matching the filter.

{
  "metrics": [
    { "channel": "Number of records", "value": 1095 }
  ],
  "message": "Metrics successfully retrieved.",
  "status": "OK",
  "date": 1725981405127
}