exosp-inhouse-app-access-logs
Fetch in-house application access logs for specified date range from Exosphere service.
exosp-inhouse-app-access-logs [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss] [order=ORDER]
- profile=PROFILE
- Connect profile code of Exosphere
- duration=NUM{mon|w|d|h|m|s}
- Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example,
10smeans data from 10 seconds earlier. - from=yyyyMMddHHmmss
- Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- to=yyyyMMddHHmmss
- End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- order=ORDER
- asc or desc.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| _time | Date | Event time | Event occurrence time |
| profile | String | Connect profile | Exosphere connect profile code |
| emp_name | String | Employee name | e.g. Scott |
| dept_name | String | Department name | e.g. HR |
| hostname | String | Hostname | Computer name |
| os_name | String | OS name | e.g. windows, macos |
| emp_email | String | User email address | |
| ip | IP | IP | IP address |
| device_id | String | Device ID | Device identifier |
| is_agent_installed | Boolean | Is agent installed | Whether the agent is installed |
| browser | String | Browser | Browser name |
| app_name | String | App name | Application name |
| result | String | Access result | Access result. e.g. Success, Fail |
| fail_reason | String | Fail reason | Fail reason. e.g. Inaccessible operating system |
| collect_time | Date | Server time |