exosp-app-execution-block-logs

Fetch application execution block logs for specified date range from Exosphere service.

exosp-app-execution-block-logs [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss] [order=ORDER]

profile=PROFILE: Connect profile code of Exosphere
duration=NUM{mon|w|d|h|m|s}: Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example, 10s means data from 10 seconds earlier.
from=yyyyMMddHHmmss: Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
to=yyyyMMddHHmmss: End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
order=ORDER: asc or desc.

Output Fields

Field	Type	Name	Description
_time	Date	Event time	Event occurrence time
profile	String	Connect profile	Exosphere connect profile code
emp_name	String	Employee name	e.g. Scott
dept_name	String	Department name	e.g. HR
hostname	String	Hostname	Computer name
os_name	String	OS name	e.g. windows, macos
user	String	User	OS account name
category	String	App category	e.g. Web Browser, P2P, Cloud Storage, Messenger
publisher	String	Publisher	Application publisher
product_name	String	Product name	Product name
process_name	String	Process name	Process name
dept_path	String	Department path	e.g. Logpresso > HR
collect_time	Date	Server time