如要擷取網域內所有使用者的所有裝置稽核事件，請使用下列 GET HTTP 要求，並附上授權文件中所述的授權權杖。
如要進一步瞭解要求查詢字串和回應屬性，請參閱「裝置稽核活動事件」。為了方便閱讀，以下範例會換行顯示：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/mobile?endTime=end date&startTime=start date
&maxResults=maximum number of events returned on a response page
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/mobile?customerId=C03az79cb
依事件名稱擷取裝置稽核事件
在某些情況下，您可能需要擷取特定事件，例如可疑活動事件。如要執行這項操作，請使用下列形式的 GET HTTP 要求：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/mobile?maxResults=maximum number of events returned on a response page
&eventName=name of the event
&filters=event parameterrelational operatorparameter value
以下範例說明如何擷取網域中 Android 使用者的所有可疑活動事件：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/mobile?eventName=SUSPICIOUS_ACTIVITY_EVENT&filters=DEVICE_TYPE==ANDROID&maxResults=25
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["缺少我需要的資訊","missingTheInformationINeed","thumb-down"],["過於複雜/步驟過多","tooComplicatedTooManySteps","thumb-down"],["過時","outOfDate","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["示例/程式碼問題","samplesCodeIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-08-29 (世界標準時間)。"],[],[],null,["# Reports API: Device Audit Activity Report\n\nThe device audit activity report returns information on activities by all\ndevices under\n[Google endpoint management](https://support.google.com/a/answer/1734200).\nEach report uses the basic report endpoint request with report-specific\nparameters such as a user's email. The maximum time period for each report is\nthe last 180 days.\n\nThe device audit activity report may be used only for lawful purposes in\naccordance with your Customer Agreement. See\n[Compare Google Workspace editions](https://support.google.com/a/answer/6043385#reports)\nto find which editions include these reports.\n\nRetrieve device audit events for a domain\n-----------------------------------------\n\nTo retrieve all device audit events for all users within your domain, use the\nfollowing `GET` HTTP request and include the authorization token described in the\n[authorization documentation](/workspace/admin/reports/v1/guides/authorizing).\nFor more information about the request query strings and response properties,\nsee\n[Device Audit Activity Events](/workspace/admin/reports/v1/appendix/activity/mobile).\nFor readability purposes, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/mobile?endTime=end date&startTime=start date\n&maxResults=maximum number of events returned on a response page\n```\n\nThe following example gets a report on all of your account's device audit events\nfor the past 180 days. The `maxResults` query parameter returns 25 results per\npage. \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/mobile?maxResults=25\n```\n\nThe following example gets a report on all device audit events for the past 180\ndays. The `customerId` specifies which customer's report is retrieved. \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/mobile?customerId=C03az79cb\n```\n\nRetrieve device audit events by event name\n------------------------------------------\n\nIn some instances, you may want to retrieve specific\n[events](/workspace/admin/reports/v1/appendix/activity/mobile),\nsuch as suspicious activity events. To do this, use a `GET` HTTP request in\nthe following form: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/mobile?maxResults=maximum number of events returned on a response page\n&eventName=name of the event\n&filters=event parameter relational operator parameter value\n```\n\nThe following example shows how to retrieve all suspicious activity events for\nAndroid users within the domain: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all/applications/mobile?eventName=SUSPICIOUS_ACTIVITY_EVENT&filters=DEVICE_TYPE==ANDROID&maxResults=25\n```"]]
