Unify and manage your data

Show Page Sections

Filtering activities

Learn about filtering the Activity Log gets.

To filter Activity Log operations, use this format in the query:

filter=({Condition Type}[AND/OR {Condition Type}]*)

The wildcard (*) means you can combine multiple conditions with the logical operators AND & OR.

Here are the condition types available for filtering:

Table 1. Condition types
Condition TypeSyntaxDescription of Condition Types
equalsequals(property, value)Defines the exact match condition.
equalsCaseSensitiveequalsCaseSensitive(property, value)Defines the exact match condition considering case.
containsWordStartingWithcontainsWordStartingWith(property, tokenized value)Defines the prefix condition. It returns activities that have condition property starting with condition value.
startsWithstartsWith(property, restricted value)Defines the prefixed condition type. It returns entities that have the condition property starting with condition value.
missingmissing(property)Returns activities with fields that have no values for a property, or the property value is empty.
existsexists(property)Returns activities having some not empty value for the property.
rangerange(property, from, to)Returns activities having the property within the specified range.
gtgt(property, value)Returns activities having property greater than the specified value.
ltlt(property, value)Returns activities having property less than the specified value.
gtegte(property, value)Returns activities having property greater than or equals the specified value.
ltelte(property, value)Returns activities having property less than or equals the specified value.
notnotThis operator negates a condition and can be used with other operators.

Use a dot-delimited path to specify each property in a filter. You can only filter by these top-level activity properties:

  • uri
  • user
  • timestamp
  • items.data.type
  • items.objectType
  • items.objectUri
  • These are available if and only if indexActivityDelta=true in the Tenant Storage Configuration:
    • items.delta.attributeType
    • items.delta.newValue
    • items.delta.oldValue
    • items.delta.sources
Note: Filters are part of the URL query string, so special characters must be URL-encoded. For example, to search for a user with name1+name2, use usefilter=equals(user,'name1%2Bname2').

Activities query filter examples

Filter by object type
filter=equals(items.objectType,'configuration/entityTypes/Organization')
Filter by user
filter=equals(user,'user1')
Find activities with items without object type
filter=missing(objectType)
Find activities that happened after 01-Apr-2025
filter=gt(timestamp, 1743465600000)
Find activities that happened between 01-Mar-2025 and 01-Apr-2025
filter=range(timestamp,1740790800000,1743465600000)
Was this content helpful?