Hi.
Is there anywhere in the IDR platform that I can search on API usage?
You can look at Settings → Log Management → Search Statistics
That shows API key usage for log search and some basic stats.
Otherwise, you can also look under Log Search, the logset “Audit Logs” shows activity performed against investigations in your IDR instance.
A quick query that groups API activity by product, action and associated user:
where(“access_method” = api) groupby(“product”,“action”, “request.user.name”)limit(10000)
Hope that helps
@antmar904 aside from what @rrio the logging on your API usage is not present in the product - there is a last accessed timestamp within the API page via Platform home but that is about it, we have visibility into API calls being made via our backend services, if you were trying to establish what an API key is being used for we could assist with that.
David
1 Like