/v2/activity-log/csv

https://us-east1-org01.analytics.controld.com

GET

CSV version of /activity-log, downloadable as CSV.

The default pageSize is 1,000,000 as this endpoint is typically used for
lightweight exports.

Organizations should consider using SIEM Streaming as an alternative to the activity log
if data durability is a concern.

Request

Authorization

API Key

Add parameter in header

Authorization

Example:

Authorization: ********************

Query Params

Responses

🟢200

text/csv

CSV

🟠400BadRequest

🟠401Unauthorized

🔴500InternalServerError

Request Example

Shell

JavaScript

Java

Swift

curl --location --globoff 'https://us-east1-org01.analytics.controld.com/v2/activity-log/csv?startTime={{%24date.now%7CaddHours(-1)}}&endTime=undefined&endpointId[]=undefined&clientId[]=undefined&action[]=undefined&trigger[]=undefined&triggerValue[]=undefined&spoofTarget[]=undefined&question[]=undefined&profileId[]=undefined&searchQuestion=undefined&searchQuestionMode=undefined&protocol[]=undefined&statusCode[]=undefined&rrType[]=undefined&srcCountry[]=undefined&dstCountry[]=undefined&dstAsn[]=undefined&srcAsn[]=undefined&dstIsp[]=undefined&srcIsp[]=undefined&sortOrder=undefined' \
--header 'Authorization: <api-key>'

Response Example

400 - Example 1

{
    "success": false,
    "error": {
        "message": "string",
        "code": 418
    }
}

Modified at 2026-03-31 19:19:32

/v2/activity-log

/v2/activity-log/realtime