OCI Audit Events through OCI-CLI

#! /usr/bin/env bash
#Autor: Ricardo Carrillo <[email protected]>
REGION="us-sanjose-1"
COMPARTMENT="ocid1.tenancy.oc1..XXXXXXXXXXXXXXXXX"
CURRENT=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
BEF=$(date -u --date="3 months ago" +"%Y-%m-%dT%H:%M:%SZ")
FILE1="oic.json"
FILE2="oic.csv"
oci --profile PERSONAL --region $REGION audit event list --compartment-id $COMPARTMENT --start-time ${BEF} --end-time ${CURRENT} --all --query 'data[?contains(["oic"], "additional-details"."adminResourceName")||contains(["admin.app.update.success", "admin.app.create.success", "admin.app.delete.success"],"additional-details".eventId)]' --output json  |  jq -r '
  .[] |
  select(.data["additional-details"].adminResourceName != null) |
  [
    .data["additional-details"].eventId,
    .data.timestamp,
    .data["additional-details"].actorDisplayName,
    .data["additional-details"].adminResourceName,
    .data["additional-details"].adminResourceType,
    .data["additional-details"].adminAppRoleAppName
  ] | @csv
' ${FILE1} |tee ${FILE2}