Is there API call to audit user login/logout info. about oci-python-sdk

[arthall]

I believe you have to iterate over the compartments to get all of the events for a tenancy. You can use list_compartments in the identity client to get all of the compartments for the tenancy.

[arthall]

Reopening the ticket to give the service team an opportunity to comment.

[vipmike007]

@arthall I did iterate over the compartments to get all of the events for a tenancy. there are only modify,post,add,delete operation events based on comparments. there is no login/loginout events here

[manjushp]

Agreed. I changed the system root password on one of my test instances and searched for the change in the audit logs

[girinag]

• Login events from the webconsole are audited with events 'InteractiveLogin' for successful logins from native OCI users and 'FederatedInteractiveLoginAttempt' for requests that get redirected to an external Identity Provider for authentication (for federated users).
• Logout events are not audited. It is a client-only action of clearing the session.
• There is no API to cause a 'login' or a 'logout' event since SDK access has no concept of client sessions
• Please refer to https://docs.cloud.oracle.com/iaas/Content/Audit/Tasks/viewinglogevents.htm for viewing event logs or using the ListEvents API to enumerate logs: https://docs.cloud.oracle.com/api/#/en/audit/20160918/AuditEvent/ListEvents
• ListEvents API allows filtering events based on startTime and endTime and you can filter it further on the client if you want events with a specific event name.

[arthall]

There hasn't been any activity on this ticket in months and @girinag explained how to get the get the login audit logs and why there aren't any logout events. Please reopen the ticket if there are unaddressed concerns.