Version: 4.42

API reference — Querying events

Overview

The Administration API exposes three types of events you can query and export:

Certificate events: record each certificate use (signing, authentication, operations denied by policy).
System events: record actions performed in the admin console (configuration changes, user management, policy creation).
HA events: record high-availability cluster activity.

Before you start

Before testing these methods, you need to set up SoapUI.

important

The  comments that appear in SOAP requests are generated automatically and may incorrectly mark required fields as optional.

This documentation explicitly states which fields are required or optional. Always trust this documentation.

Certificate events

`ListEvents`

Returns the list of certificate usage events matching the specified parameters, ordered by date.

Name	Type	Required	Description
`filter`	string	No	Text that results must contain. If empty, returns all events.
`numBlock`	integer	Yes	Result block number to return (pagination). The first block is `0`.
`orderColumn`	string	Yes	Sort column: `ORDER_BY_DATE`, `ORDER_BY_IP`, `ORDER_BY_USER`, `ORDER_BY_CONTEXT`, `ORDER_BY_CERTIFICATE`, `ORDER_BY_DESCRIPTION`, `ORDER_BY_URL`.
`orderType`	string	Yes	Sort direction: `ORDER_ASCENDING`, `ORDER_DESCENDING`.
`filterType`	string	Yes	Filters by event type: `NO_FILTER`, `FILTER_BY_SECURITY` (session), `FILTER_BY_CERTIFICATE_OPERATION` (certificate use), `FILTER_BY_PERMISSION_DENIED`, `FILTER_BY_PERMISSION_ALLOWED`, `FILTER_BY_CERT_LIFECYCLE`.
`dateFilterType`	string	Yes	Predefined date filter: `NO_DATE_FILTER`, `DATE_FILTER_TODAY`, `DATE_FILTER_THIS_WEEK`, `DATE_FILTER_THIS_MONTH`, `DATE_FILTER_LAST_THREE_MONTHS`, `DATE_FILTER_LAST_SIX_MONTHS`, `DATE_FILTER_THIS_YEAR`, `DATE_FILTER_CUSTOM_FILTER`. Use `DATE_FILTER_CUSTOM_FILTER` to specify a range with `from` and `to`.
`from`	datetime	No	Start date of the custom range. Only used when `dateFilterType` is `DATE_FILTER_CUSTOM_FILTER`.
`to`	datetime	No	End date of the custom range. Only used when `dateFilterType` is `DATE_FILTER_CUSTOM_FILTER`.

Request
Response

<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:urn="urn:evolium:redtrust:administration:ws">
    <soap:Header/>
    <soap:Body>
        <urn:ListEvents>
            <urn:filter></urn:filter>
            <urn:numBlock>0</urn:numBlock>
            <urn:orderColumn>ORDER_BY_DATE</urn:orderColumn>
            <urn:orderType>ORDER_DESCENDING</urn:orderType>
            <urn:filterType>NO_FILTER</urn:filterType>
            <urn:dateFilterType>DATE_FILTER_TODAY</urn:dateFilterType>
        </urn:ListEvents>
    </soap:Body>
</soap:Envelope>

<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
    <s:Header>
        <a:Action s:mustUnderstand="1">urn:evolium:redtrust:administration:ws/RTAdminService/ListEventsResponse</a:Action>
    </s:Header>
    <s:Body>
        <ListEventsResponse xmlns="urn:evolium:redtrust:administration:ws">
            <Result xmlns:b="http://schemas.datacontract.org/2004/07/RTAdminService.Types" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
                <ResultStatus xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">SUCCESS</ResultStatus>
                <ErrorCode xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">OK</ErrorCode>
                <ResultMessage xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">Operation finalized successfully</ResultMessage>
                <ResultData i:type="b:ArrayOfEventView" xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">
                    <b:EventView>
                        <b:certificate/>
                        <b:context xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays">
                            <c:string>Process: chrome</c:string>
                            <c:string>Original process: chrome.exe</c:string>
                            <c:string>Agent id: XXXX-XXXXX-XXXXX-XXXXX</c:string>
                        </b:context>
                        <b:date>2026-04-22T09:30:00</b:date>
                        <b:description>Application connection accepted</b:description>
                        <b:ip>192.168.1.100</b:ip>
                        <b:url>{"process":"chrome","browserType":"CH","fullUrl":"https://example.com","policyName":"Corporate portal access","agentId":"XXXX-XXXXX-XXXXX-XXXXX"}</b:url>
                        <b:user>juan.garcia@local.users</b:user>
                    </b:EventView>
                </ResultData>
                <TotalItems xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">1</TotalItems>
            </Result>
        </ListEventsResponse>
    </s:Body>
</s:Envelope>

See the full field reference for EventView in Response objects.

System events

`ListSystemEvents`

Returns the list of admin console activity events matching the specified parameters, ordered by date.

Name	Type	Required	Description
`filter`	string	No	Text that results must contain. If empty, returns all events.
`numBlock`	integer	Yes	Result block number to return (pagination). The first block is `0`.
`orderColumn`	string	Yes	Sort column: `ORDER_BY_DATE`, `ORDER_BY_IP`, `ORDER_BY_USER`, `ORDER_BY_SECTION`, `ORDER_BY_INFORMATION`.
`orderType`	string	Yes	Sort direction: `ORDER_ASCENDING`, `ORDER_DESCENDING`.
`dateFilterType`	string	Yes	Predefined date filter. Same values as in `ListEvents`.
`from`	datetime	No	Start date of the custom range. Only used when `dateFilterType` is `DATE_FILTER_CUSTOM_FILTER`.
`to`	datetime	No	End date of the custom range. Only used when `dateFilterType` is `DATE_FILTER_CUSTOM_FILTER`.

Request
Response

<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:urn="urn:evolium:redtrust:administration:ws">
    <soap:Header/>
    <soap:Body>
        <urn:ListSystemEvents>
            <urn:filter></urn:filter>
            <urn:numBlock>0</urn:numBlock>
            <urn:orderColumn>ORDER_BY_DATE</urn:orderColumn>
            <urn:orderType>ORDER_DESCENDING</urn:orderType>
            <urn:dateFilterType>DATE_FILTER_THIS_WEEK</urn:dateFilterType>
        </urn:ListSystemEvents>
    </soap:Body>
</soap:Envelope>

<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
    <s:Header>
        <a:Action s:mustUnderstand="1">urn:evolium:redtrust:administration:ws/RTAdminService/ListSystemEventsResponse</a:Action>
    </s:Header>
    <s:Body>
        <ListSystemEventsResponse xmlns="urn:evolium:redtrust:administration:ws">
            <Result xmlns:b="http://schemas.datacontract.org/2004/07/RTAdminService.Types" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
                <ResultStatus xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">SUCCESS</ResultStatus>
                <ErrorCode xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">OK</ErrorCode>
                <ResultMessage xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">Operation finalized successfully</ResultMessage>
                <ResultData i:type="b:ArrayOfSystemEventView" xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">
                    <b:SystemEventView>
                        <b:context xmlns:c="http://schemas.datacontract.org/2004/07/System">
                            <c:ValueTupleOfstringstring>
                                <c:Item1>Friendly Name</c:Item1>
                                <c:Item2>maria</c:Item2>
                            </c:ValueTupleOfstringstring>
                            <c:ValueTupleOfstringstring>
                                <c:Item1>Email</c:Item1>
                                <c:Item2>maria@test.com</c:Item2>
                            </c:ValueTupleOfstringstring>
                            <c:ValueTupleOfstringstring>
                                <c:Item1>Domain</c:Item1>
                                <c:Item2>local.users</c:Item2>
                            </c:ValueTupleOfstringstring>
                        </b:context>
                        <b:dateTime>2026-03-23T11:12:57</b:dateTime>
                        <b:information>El usuario maria.lopez@local.users ha sido creado.</b:information>
                        <b:ip>172.22.0.7</b:ip>
                        <b:newData>{"username":"maria.lopez","email":"maria@test.com","active":true,"name":"maria","domain":"local.users"}</b:newData>
                        <b:oldData i:nil="true"/>
                        <b:section>Admin WS: AddLocalUser</b:section>
                        <b:user>admin@local</b:user>
                    </b:SystemEventView>
                </ResultData>
                <TotalItems xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">1</TotalItems>
            </Result>
        </ListSystemEventsResponse>
    </s:Body>
</s:Envelope>

See the full field reference for SystemEventView in Response objects.

HA events

`ListHAEvents`

Returns the list of high-availability cluster events matching the specified parameters, ordered by date. Returns SystemEventView objects in the same format as ListSystemEvents.

Name	Type	Required	Description
`filter`	string	No	Text that results must contain. If empty, returns all events.
`numBlock`	integer	Yes	Result block number to return (pagination). The first block is `0`.
`orderColumn`	string	Yes	Sort column: `ORDER_BY_DATE`, `ORDER_BY_IP`, `ORDER_BY_USER`, `ORDER_BY_SECTION`, `ORDER_BY_INFORMATION`.
`orderType`	string	Yes	Sort direction: `ORDER_ASCENDING`, `ORDER_DESCENDING`.
`dateFilterType`	string	Yes	Predefined date filter. Same values as in `ListEvents`.
`from`	datetime	No	Start date of the custom range. Only used when `dateFilterType` is `DATE_FILTER_CUSTOM_FILTER`.
`to`	datetime	No	End date of the custom range. Only used when `dateFilterType` is `DATE_FILTER_CUSTOM_FILTER`.

Request
Response

<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:urn="urn:evolium:redtrust:administration:ws">
    <soap:Header/>
    <soap:Body>
        <urn:ListHAEvents>
            <urn:filter></urn:filter>
            <urn:numBlock>0</urn:numBlock>
            <urn:orderColumn>ORDER_BY_DATE</urn:orderColumn>
            <urn:orderType>ORDER_DESCENDING</urn:orderType>
            <urn:dateFilterType>NO_DATE_FILTER</urn:dateFilterType>
        </urn:ListHAEvents>
    </soap:Body>
</soap:Envelope>

<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
    <s:Header>
        <a:Action s:mustUnderstand="1">urn:evolium:redtrust:administration:ws/RTAdminService/ListHAEventsResponse</a:Action>
    </s:Header>
    <s:Body>
        <ListHAEventsResponse xmlns="urn:evolium:redtrust:administration:ws">
            <Result xmlns:b="http://schemas.datacontract.org/2004/07/RTAdminService.Types" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
                <ResultStatus xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">SUCCESS</ResultStatus>
                <ErrorCode xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">OK</ErrorCode>
                <ResultMessage xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">Operation finalized successfully</ResultMessage>
                <ResultData i:type="b:ArrayOfSystemEventView" xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">
                    <b:SystemEventView>
                        <b:context i:nil="true"/>
                        <b:dateTime>2026-04-20T03:00:00</b:dateTime>
                        <b:information>Node failover completed</b:information>
                        <b:ip>192.168.1.51</b:ip>
                        <b:newData i:nil="true"/>
                        <b:oldData i:nil="true"/>
                        <b:section>HA</b:section>
                        <b:user i:nil="true"/>
                    </b:SystemEventView>
                </ResultData>
                <TotalItems xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">1</TotalItems>
            </Result>
        </ListHAEventsResponse>
    </s:Body>
</s:Envelope>

See the full field reference for SystemEventView in Response objects.

Export events

`DownloadCSVEvents`

Downloads a CSV file with the certificate events matching the specified parameters. Parameters go in the SOAP header, not the body.

Name	Type	Required	Description
`basicFilter` (header)	string	No	Text that results must contain. If empty, includes all events.
`filterType` (header)	string	Yes	Filters by event type. Same values as in `ListEvents`.
`dateFilterType` (header)	string	Yes	Predefined date filter. Same values as in `ListEvents`.
`from` (header)	datetime	No	Start date of the custom range. Only used when `dateFilterType` is `DATE_FILTER_CUSTOM_FILTER`.
`to` (header)	datetime	No	End date of the custom range. Only used when `dateFilterType` is `DATE_FILTER_CUSTOM_FILTER`.

Request
Response

<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:urn="urn:evolium:redtrust:administration:ws">
    <soap:Header>
        <urn:basicFilter></urn:basicFilter>
        <urn:filterType>NO_FILTER</urn:filterType>
        <urn:dateFilterType>NO_DATE_FILTER</urn:dateFilterType>
    </soap:Header>
    <soap:Body>
        <urn:CSVFilteredWithDatesMessage/>
    </soap:Body>
</soap:Envelope>

The result status and filename are returned in the SOAP response header. The file content is in the body as an MTOM binary attachment.

<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
    <s:Header>
        <a:Action s:mustUnderstand="1">urn:evolium:redtrust:administration:ws/RTAdminService/DownloadCSVEventsResponse</a:Action>
        <h:result s:mustUnderstand="1" xmlns:h="urn:evolium:redtrust:administration:ws" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
            <ResultStatus xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">SUCCESS</ResultStatus>
            <ErrorCode xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">OK</ErrorCode>
            <ResultMessage xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">Operation finalized successfully</ResultMessage>
            <Filename xmlns="http://schemas.datacontract.org/2004/07/RTService.ModelsResult">Events_202605061401.csv</Filename>
        </h:result>
    </s:Header>
    <s:Body>
        <ResultFileStream xmlns="urn:evolium:redtrust:administration:ws">
            <stream>
                <xop:Include href="cid:http://tempuri.org/1/639136728960186888" xmlns:xop="http://www.w3.org/2004/08/xop/include"/>
            </stream>
        </ResultFileStream>
    </s:Body>
</s:Envelope>

Was this page helpful?

Overview​

Before you start​

Certificate events​

ListEvents​

System events​

ListSystemEvents​

HA events​

ListHAEvents​

Export events​

DownloadCSVEvents​