turbot / steampipe-plugin-okta

Use SQL to instantly query users, groups, applications and more from Okta. Open source CLI. No DB required.
https://hub.steampipe.io/plugins/turbot/okta
Apache License 2.0
8 stars 4 forks source link

Add table okta_system_log #86

Closed bigdatasourav closed 11 months ago

bigdatasourav commented 1 year ago

Example query results

Results ``` select log_actor_name, log_ip_address, display_message, title from okta_system_log where log_event_time >= now() - interval '3 days'; +----------------------+----------------+-------------------------------------+--------------------------------------+ | log_actor_name | log_ip_address | display_message | title | +----------------------+----------------+-------------------------------------+--------------------------------------+ | Okta System | | Administrator consent granted. | cc6d07a4-3f8d-11ee-950b-09c46ac7f661 | | sourav chakraborty | 49.37.54.149 | Evaluation of sign-on policy | dddfe77b-40e9-11ee-bbae-5305cf2fd7dd | | supportuser@okta.com | | Update application | cc717477-3f8d-11ee-950b-09c46ac7f661 | | Okta System | 49.37.54.149 | Authenticate user with social login | ddcef786-40e9-11ee-bbae-5305cf2fd7dd | | Okta Admin Console | 49.37.54.149 | OIDC authorization code request | e0655964-40e9-11ee-910f-75851e573412 | | sourav chakraborty | 49.37.54.149 | User login to Okta | dde083bf-40e9-11ee-bbae-5305cf2fd7dd | | sourav chakraborty | 49.37.54.149 | Evaluation of sign-on policy | e057288e-40e9-11ee-910f-75851e573412 | | Okta Admin Console | 54.71.214.179 | OIDC id token is granted | e0e9a4a3-40e9-11ee-9b34-5514329e0bbd | | sourav chakraborty | 54.71.214.179 | User single sign on to app | e0e9a4a4-40e9-11ee-9b34-5514329e0bbd | | sourav chakraborty | 49.37.54.149 | User accessing Okta admin app | e0f20917-40e9-11ee-9b34-5514329e0bbd | | Okta Admin Console | 54.71.214.179 | OIDC access token is granted | e0e9cbb5-40e9-11ee-9b34-5514329e0bbd | +----------------------+----------------+-------------------------------------+--------------------------------------+ select title, severity, transaction ->> 'id' as transaction_id, transaction ->> 'type' as transaction_type, transaction -> 'detail' as transaction_detail from okta_system_log; +--------------------------------------+----------+-----------------------------+------------------+--------------------+ | title | severity | transaction_id | transaction_type | transaction_detail | +--------------------------------------+----------+-----------------------------+------------------+--------------------+ | 19417d57-3d0f-11ee-a8d0-a5f67ff631df | INFO | moiav0n56lZqhlG8v5d7 | JOB | {} | | cc6d07a4-3f8d-11ee-950b-09c46ac7f661 | INFO | moiawg0ybft7w1GHi5d7 | JOB | {} | | 1946fb98-3d0f-11ee-a8d0-a5f67ff631df | INFO | moiav0n56lZqhlG8v5d7 | JOB | {} | | cc717477-3f8d-11ee-950b-09c46ac7f661 | INFO | moiawg0ybft7w1GHi5d7 | JOB | {} | | dddfe77b-40e9-11ee-bbae-5305cf2fd7dd | INFO | ZOSuEHMpuFVepPJsw1QbLQAADw8 | WEB | {} | | ddcef786-40e9-11ee-bbae-5305cf2fd7dd | INFO | ZOSuEHMpuFVepPJsw1QbLQAADw8 | WEB | {} | | e0655964-40e9-11ee-910f-75851e573412 | INFO | ZOSuFL4JuFepP2vd0CFRYgAABa0 | WEB | {} | | dde083bf-40e9-11ee-bbae-5305cf2fd7dd | INFO | ZOSuEHMpuFVepPJsw1QbLQAADw8 | WEB | {} | | e057288e-40e9-11ee-910f-75851e573412 | INFO | ZOSuFL4JuFepP2vd0CFRYgAABa0 | WEB | {} | | e0e9a4a3-40e9-11ee-9b34-5514329e0bbd | INFO | ZOSuFdYPgHHnoaaiTD1XWwAADLw | WEB | {} | | e0e9a4a4-40e9-11ee-9b34-5514329e0bbd | INFO | ZOSuFdYPgHHnoaaiTD1XWwAADLw | WEB | {} | | e0f20917-40e9-11ee-9b34-5514329e0bbd | INFO | ZOSuFUBJ_Gk4T3H98K9H_wAABCA | WEB | {} | | e0e9cbb5-40e9-11ee-9b34-5514329e0bbd | INFO | ZOSuFdYPgHHnoaaiTD1XWwAADLw | WEB | {} | +--------------------------------------+----------+-----------------------------+------------------+--------------------+ ```
github-actions[bot] commented 1 year ago

This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

github-actions[bot] commented 11 months ago

This PR was closed because it has been stalled for 90 days with no activity.