Retrieving Audit Events From
/events/audit
You can retrieve audit events from the same
/events endpoint as threat and device events. This way you can get audit, threat, and device events in sequence. If you want to filter or sort on a specific
auditEventType you still must use the
/events/audit endpoint.
An example of sending an audit event request with no
streamPosition and no specified
limit, using the Postman REST client plug-in for Chrome:
