CASB API request not gathering the number of users for a specific application

Products

• CASB Audit
• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard

Issue/Introduction

This query brings all the information about the services for a certain time period

https://api-vip.elastica.net/(casb-tenant)/audit/v2/data/?resource=service&earliest_date={earliest}&latest_date={latest}&resolution=86400 

The query does not gather the number of users for a service 

Resolution

To gather the information do the following:

1. Look at the following documentation Getting Audit summary information 

2. Under the heading Sample Audit Summary response you see the following:

   "users_count": 9,
   "sort_key_brr": 38,
   "service_id": 3545,

3. This gives the user count. 

To match the service_id with a service you need to do the following:

1. Login to the CloudSOC tenant
   
   
2. Go to Audit | Services and selecting the service you are interested in 
   
   
3. Once the service is selected in the Address bar you can see the service ID:
   
   

 

Additional Information

For all API documentation you can see that here APIs