Audit Log API

The Audit Log API allows for the querying of the audit logs in a Celonis Platform team and then extract this data to provide detailed insights into event activity in your team. Once the data is extracted, you can feed the information back into the Celonis Platform to create a data model using your data. This allows you create your own views in Studio using the data pulled from the API.

To connect to the APIs and create an extractor, follow these procedures.

Use Cases

The Audit Log API can be used to:

• Connect external monitoring tools, such as SIEM tools, to capture and monitor platform admin and change events.
• Export Audit Log events back into a Celonis Studio view or other tool for analysis or risk assessment needs.

Authentication

This API supports multiple methods of authentication:

• (preferred method) Via OAuth 2.0 token with scope audit.log:read , passed in an HTTP header like this: Authorization: Bearer TOKEN .
• Via Application keys, passed in an HTTP header like this: Authorization: AppKey APPLICATION_KEY .
• Via API keys, passed in an HTTP header like this: Authorization: Bearer API_KEY .

See this help page for more information about OAuth 2.0.