decision_logs/query

The query API returns the last N decisions recorded for a particular policy. In contrast to decision log storage object retrieval, the query API returns data that is typically no more than a minute old.

URL

POST .../api/v1/decision_logs/query

Input payload

{
  "page": {
    "size": "[page size]",
    "token": "[token of page to retrieve, must be empty on the first call]"
  },
  "policy_id": "[policy id or empty for all policies]",
  "top_n": "[last N decisions to retrieve]"
}

Example

Given a request that uses the default page size (10):

{
  "top_n": 12,
  "policy_id": "18d6580f-7fb0-11ec-bdd9-01c9e2c2068b"
}

The response will resemble this:

{
  "page":  {
    "next_token":  "e2a62bd2-2704-48a4-b5e7-86f7885012f9",
    "result_size":  10,
    "total_size":  12
  },
  "results":  [
    {
      "log":  "{\"decision_id\":\"1834b93a-3a15-4f98-b6e2-3b1221ca984c\",\"decision_time\":\"2022-01-31T23:52:03Z\",\"tenant_id\":\"0116e83a-7e21-11ec-ab5b-00c9e2c2068b\",\"user\":{\"id\":\"2bfaa552-d9a5-41e9-a6c3-5be62b4433c8\",\"email\":\"aprils@acmecorp.com\"},\"path\":\"peoplefinder.POST.api.users.__id\",\"decisions\":{\"allowed\":true},\"policy\":{\"id\":\"18d6580f-7fb0-11ec-bdd9-01c9e2c2068b\",\"service\":\"registry.beta.aserto.com\",\"image\":\"peoplefinder/peoplefinder-abac\",\"tag\":\"latest\",\"digest\":\"sha256:dd0c6506d8d20539d46acbebffa03976274d022818dec0337a250df72d205b3a\"},\"resource\":{\"id\":\"dfdadc39-7335-404d-af66-c77cf13a15f8\"}}"
    },
    ...
    {
      "log":  "{\"decision_id\":\"89ffa41e-8083-49f6-8714-832973ff2040\",\"decision_time\":\"2022-02-03T00:28:00Z\",\"tenant_id\":\"0116e83a-7e21-11ec-ab5b-00c9e2c2068b\",\"user\":{\"id\":\"dfdadc39-7335-404d-af66-c77cf13a15f8\",\"email\":\"euang@acmecorp.com\"},\"path\":\"peoplefinder.PUT.api.users.__id\",\"decisions\":{\"allowed\":true},\"policy\":{\"id\":\"18d6580f-7fb0-11ec-bdd9-01c9e2c2068b\",\"service\":\"registry.beta.aserto.com\",\"image\":\"peoplefinder/peoplefinder-abac\",\"tag\":\"latest\",\"digest\":\"sha256:dd0c6506d8d20539d46acbebffa03976274d022818dec0337a250df72d205b3a\"},\"resource\":{\"id\":\"dfdadc39-7335-404d-af66-c77cf13a15f8\"}}"
    }
  ]
}

next_token indicates the remaining results can be retrieved issuing another request with the following payload:

{
  "page": {
      "token": "e2a62bd2-2704-48a4-b5e7-86f7885012f9"
  }
  "top_n": 12,
  "policy_id": "18d6580f-7fb0-11ec-bdd9-01c9e2c2068b"
}

See schemas for details of the contents of the logs returned by query.