Cisco Duo - Admin - Get Authentication Logs
This atomic belongs to the Cisco Duo: Admin API atomic group.
Fetches authentication logs from Cisco Duo for the given time period. Various filters are available including user IDs, group IDs, factors, results, and more. This atomic requires the "Grant read log" permission.
Note: This action uses the Duo Admin API which is not enabled by default. You may need to contact Duo Support and ask for the admin API to be enabled.
Target: Cisco Duo integration target or HTTP endpoint for your Duo API hostname with no path
Account Key: None if using an integration-provided target, integration and secret keys if using an HTTP Endpoint target
Steps:
[] Convert the date/times to the correct format
[] Generate the request payload and, if necessary, generate a signature for it
[] Send the request to Duo
[] Check if the request was successful:
[]> If it was, attempt to extract the results and set the output variables
[]> If it wasn't, return an error
More information about this API: https://duo.com/docs/adminapi#authentication-logs