You can get all audit activity events for a selected environment. The GET /environments/{environmentId}/activities request accepts SCIM filtering expressions to fine-tune the response.

The following sample shows the GET /environments/{environmentId}/activities?filter=recordedat gt "2018-08-20T00:00:00Z" AND recordedat lt "2018-08-22T23:59:00Z" operation to return all audit activity events for the specified environment. The filtering expression designates a time period between 08/20/2018 and 08/22/2018.

If the activity event is initiated by an administrator on other administrators, this will be indicated in the response by a tags.adminIdentityEvent attribute.