Skip to main content
Reviewing system events

ON THIS PAGE

Reviewing system events

Review events in the Management Console on the Events page.

On the events page, you can follow up on events in your system and get information about the event type and the user who initiated the event.

Information noteEvents are archived after 90 days. Archived events are not removed.
Events in the Management Console
Property Description
Date Date and time in UTC format.
Source Source of the event information.
Event type Type of event. See examples.
User User initiating the event. If the user name cannot be displayed, the user ID is displayed instead.
Right arrow Click the arrow to the far right to display additional information from the source or event.

In the table, sort by using the arrows in the properties header and filter by using the funnel. Use buttons for refreshing and resetting after filtering.

Examples of sources:

  • com.qlik/licenses
  • com.qlik/engine
  • com.qlik/edge-auth

Examples of events:

  • app.created
  • user-session.begin
  • assignment.added
  • assignment.revoked

How to retrieve archived events using the audit API

In this example, Postman is used to retrieve events that have been archived.

Preparation

Before you send the request, ensure that you have the following:

  • the URL for the Qlik Sense cluster.
  • the API key that is required to make authorized requests to the API, see Managing API keys.

Retrieving the archived events

Do the following:

  1. Start Postman.
  2. Set the HTTP method to GET.

  3. Enter the following path in the URL area, including the date parameter to filter the archived events:

    {url}/api/v1/audits/archive?date=yyyy-mm-dd

    The full URL should look something like:

    https://abc.us.example.com/api/v1/audits/archive?date=2019-11-16

  4. Select Authorization. In the Type drop-down list, select Bearer Token. Enter the API key in the Token field.

  5. Click Send.

    The JSON response from the API should look something like this:

    { "data": [ { "source": "com.qlik/edge-auth", "contentType": "application/json", "eventType": "com.qlik.user-session.begin", "eventId": "ykaaY1j2yZvClvwN6pmbO_3tjZeoVoBb", "eventTime": "2019-11-16T17:29:50.273Z", "tenantId": "bOowHi6pxn0GaUcXIna4oFco62ag9uoH", "userId": "fSuVsk3HjaeBeiSoyNWdbwH6zwr4T-Jq", "data": { "subject": "okta\\00ukoxpallpY4QRs70x7" } }, { … } ] }