Actions222
- Application Baseline Actions
- Attack Surface Actions
- Backup Software Actions
- EDR Actions
- Tags Actions
- PII Actions
- External Scan Actions
- Settings Actions
- Compliance Assessment Actions
- Reports Actions
- Compliance Actions
- Jobs Actions
- Active Directory Actions
- Retrieve Ad Roles
- Retrieve Ad User Licenses
- Retrieve Azure Licenses
- Retrieve Azure Ad Logs
- Retrieve Azure Secure Score
- Retrieve Ad Password Policies
- Retrieve Ad Groups View
- Retrieve Ad Ous View
- Retrieve Ad Gpos View
- Retrieve Ad Computers View
- Retrieve Ad Users View
- Retrieve Ad Domain Details
- Retrieve Ad Gpos Details
- Retrieve Get Ous Details
- Retrieve Get Groups Details
- Retrieve Ad Group Users
- Retrieve Ad Group Computers
- Retrieve Get User Details
- Retrieve Get Computer Details
- Retrieve Ad Roles Details
- Retrieve Ad Roles Member
- Retrieve Ad Basic Info
- Audit Log Actions
- Ad Audit Actions
- Asset Data Actions
- Retrieve Bios Info
- Retrieve Bio Info
- Retrieve Browser Extensions
- Retrieve Browser Extension
- Retrieve Ciphers View
- Retrieve Cipher View
- Retrieve Windows Protection Status
- Retrieve Window Protection Status
- Retrieve Asset Compliance Report Card
- Retrieve Asset Firewall Policy
- Retrieve Asset Installed Drivers
- Retrieve Asset Installed Driver
- Retrieve Asset Interface
- Retrieve Asset Msdt
- Retrieve Asset Ports
- Retrieve Asset Port
- Retrieve Asset Security Report Data
- Retrieve Asset Security Report Datum
- Retrieve Asset Shares
- Retrieve Asset Share
- Retrieve Asset Storages
- Retrieve Asset Storage
- Retrieve Asset Unqouted Services
- Retrieve Asset Unqouted Service
- Retrieve Asset User Shares
- Retrieve Asset User Share
- Retrieve Asset Video Info
- Retrieve Asset Windows Reboot Required
- Retrieve Asset Window Reboot Required
- Vulnerabilities Actions
- Firewall Actions
- Integration Actions
- Retrieve Integration Credentials
- Retrieve Integration Credential
- Create Integration Credential
- Update Integration Credential
- Delete Integration Credential
- Retrieve Integration Rules
- Retrieve Integration Rule
- Create Integration Rule
- Update Integration Rule
- Delete Integration Rule
- Retrieve Company Mappings
- Retrieve Company Mapping
- Create Company Mapping
- Update Company Mapping
- Delete Company Mapping
- Event Set Actions
- Ticket Template Actions
- Scheduler Actions
- Credentials Actions
- Asset Actions
- Retrieve Records
- Retrieve Assets
- Retrieve Asset
- Create Asset
- Update Asset
- Delete Asset
- Retrieve Asset Stats
- Retrieve Asset Stat
- Retrieve Asset View
- Retrieve Cron Jobs
- Retrieve Kernel Modules
- Retrieve Suid Permissions
- Retrieve Ufw Firewall Rules
- Retrieve Selinux Settings
- Retrieve Asset Iptables Rules
- Retrieve Asset Users
- Retrieve Asset Processes Running
- Retrieve Asset Services
- Retrieve Asset Patches Info
- Retrieve Asset Firewall Rules
- Retrieve Asset Registry Misconfiguration
- Retrieve Asset Open Ports
- Retrieve Notification Tickets View
- Retrieve System Events View
- Discovery Settings Actions
- Retrieve Discovery Settings
- Retrieve Discovery Setting
- Create Discovery Setting
- Update Discovery Setting
- Delete Discovery Setting
- Retrieve Agent Discoverysettings Mapping
- Retrieve Agent Discoverysetting Mapping
- Create Agent Discoverysetting Mapping
- Update Agent Discoverysetting Mapping
- Delete Agent Discoverysetting Mapping
- Auth Actions
- Company Actions
- Agent Actions
Overview
This node interacts with the "Company" resource to retrieve audit data from an Adaudit system via a REST API. It is designed to fetch audit logs or records based on user-defined query conditions, pagination controls, and sorting preferences. This node is useful in scenarios where you need to monitor, analyze, or report on company-related audit events, such as tracking user activities, compliance checks, or security audits.
Practical examples include:
- Retrieving audit logs filtered by specific criteria (e.g., date ranges, event types).
- Paginating through large sets of audit records.
- Sorting audit results by timestamp or other fields.
Properties
| Name | Meaning |
|---|---|
| X USER ID | User Id header value required for authentication or identification in the API request. |
| Condition | Query condition string to filter audit records (e.g., SQL-like or API-specific syntax). |
| Skip | Number of records to skip for pagination purposes. |
| Limit | Maximum number of records to return. |
| Order By | Field(s) to order the results by (e.g., timestamp, user). |
Output
The node outputs JSON data representing the retrieved Adaudit records matching the query parameters. The structure typically includes an array of audit entries, each containing details such as event type, timestamp, user information, and other relevant audit metadata.
If binary data were involved (not indicated here), it would represent files or attachments related to audit records, but this node focuses on JSON audit log data.
Dependencies
- Requires an API key or token credential to authenticate requests to the Connect Secure API.
- Depends on the external Connect Secure API service that exposes the Company Adaudit endpoint.
- No additional environment variables are explicitly required beyond standard API credential configuration in n8n.
Troubleshooting
- Missing or invalid X USER ID: The API requires the
X USER IDheader; ensure it is provided and correct to avoid authentication errors. - Invalid query condition syntax: If the
Conditionproperty is malformed, the API may return errors or empty results. Verify the query format matches the API specification. - Pagination issues: Setting
SkiporLimitincorrectly might result in no data or repeated data. Adjust these values carefully. - Order By field not recognized: Using unsupported fields in
Order Bycan cause API errors; confirm valid sortable fields with the API documentation. - API connectivity problems: Network issues or incorrect credentials will prevent data retrieval. Check API access and credential validity.
Links and References
- Connect Secure API Documentation (replace with actual URL)
- Adaudit Query Syntax Guide (replace with actual URL)