Getting Tenant Wise Count of Failed Playbooks

[vivek_17]

Hi everyone,

I’m currently working in a multi-tenancy environment and I want to display the count of failed playbooks on the dashboard. For this, I’m storing the failed count in a key-store record and displaying it through a Richtext HTML widget on the dashboard.

To update the key-store values, I’m using the “Make FortiSOAR API Call” utility. I’m calling the following endpoint to get the total failed playbook executions:

Method: GET
Endpoint: api/wf/api/historical-workflows/?format=json&limit=1000&status=failed

The issue I’m facing is that this API returns a maximum of 1000 logs. I’m parsing these logs to calculate the tenant-wise count of failed playbooks. I also tried applying a date range filter like:
createDate >= 2025-11-6T04:43:21.745393Z
but the date range filter does not seem to work when combined with the status=failed filter. So, status and date filters are not working together here.Same thing with POST method.

Because of the 1000-record limit, if there are more than 1000 failed executions overall, I’m not sure how to accurately split them tenant-wise.

Has anyone implemented a workaround or found a reliable way to get tenant-wise failed playbook counts when the failed logs exceed 1000 entries? Any suggestions would be appreciated.

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks.

[cmaheshwari]

Let me get back to you on this query

[cmaheshwari]

You can use below endpoint to search the historical logs with status as 'Failed' and created date

/api/historical-workflows/log_list/?format=json&limit=1000&created=2025-11-02+07:10:13&status=failed