SOAR API endpoint - api/external/v1/logging/python

Hey everyone!

Has anyone had success with using this API endpoint on Chronicle SOAR to get Connector logs?

/api/external/v1/logging/python

It's visible under Cloud Logging in Swagger. Swagger references the following sample config:

 

  "filter": "labels.integration_name=\"Siemplify\"",  "pageToken": "string",  "pageSize": 0,  "sortOrder": "desc"  

 

I've been trying to adapt this to get my config working.

 

{ "filter": "labels.connector_name=\"My Exchange Mail Connector v2 with Oauth Authentication\"", "pageToken": "string", "pageSize": 0,"sortOrder": "desc" } '

 

In all instances, including just using the sample config, I get a 400 Bad Request error. Is there any documentation surrounding the data structures that we can use in that filter anywhere, or any instances where anyone has got a working configuration?

Thought I'd check in on this before going to Support.

 

0 2 1,096
2 REPLIES 2