API access to cdFMC audit log configuration changes

[rc11]

My developer colleague and I (detection engineer) would like to call the following API endpoint:

GET​/api​/fmc_platform​/v1​/domain​/{domainUUID}​/audit​/configchanges

However, according to the API documentation this call requires a parameter called snapshotId that is not documented anywhere else, and doesn't even show up anywhere in the GUI. 

Does anyone know what this parameter represents, and how to get any or all valid snapshotId values for a tenant?

Thanks in advance.

[Ben Weber]

Hi @rc11 

AFAIK, the snapshot-id  parameter represents the UUID of a specific configuration snapshot or audit record that captures the state of the system at a given point in time. 

You should be able to retrieve the list of snapshot-id variables by querying the /auditrecords endpoint?

Let me know if that works. Good luck!