# Retrieves all File Activities Detected within the Network.

This API fetches a detailed list of file-related operations (create, open, modify, delete, etc.) occurring across all network devices. It also provides filters to narrow results by event type, device, file extension, domain, computer/group, and time range.

## Endpoint

`GET /api/1.4/reports/dcm/filetrace`

## Request URL

https://[{serverurl}](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/api/1.4/reports/dcm/filetrace

## Scope

`DesktopCentralCloud.DeviceControl.READ`

## Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Query Parameters

- **page** `integer` *(Optional)*: Current page number for pagination
- **pagelimit** `integer` *(Optional)*: Number of records per page
- **period** `integer` *(Optional)*: Filter based on time period
  - `0` - This week
  - `1` - This month
  - `2` - This year
  - `3` - Last week
  - `4` - Last month
  - `5` - Last 2 months
  - `6` - Last 3 months
  - `7` - Last 6 months
  - `8` - Last 9 months
  - `9` - Last year
- **event** `integer` *(Optional)*: Filter based on file event type
  - `0` - Unknown
  - `1` - Create
  - `2` - Open
  - `3` - Delete
  - `4` - Rename
  - `5` - Modify
  - `6` - Read
  - `7` - Move
  - `8` - Copy
- **isblocked** `integer` *(Optional)*:
  - `0` - Allowed
  - `1` - Blocked
- **gid** `long` *(Optional)*: Filter devices connected to a particular group of computers. Group IDs can be obtained from `/api/1.4/customgroup/getCGList`
- **dipId** `string` *(Optional)*: Filter file activities of a particular device using its device instance path
- **fileExtn** `string` *(Optional)*: Filter file activities by file extension
- **fileExtnGrp** `string` *(Optional)*: Filter file activities by file extension group
- **domain** `string` *(Optional)*: Filter the records based on domain names
- **numberOfDays** `long` *(Optional)*: Filter file activities that occurred in the last N days
- **start** `long` *(Optional)*: Start timestamp for date range filter
- **end** `long` *(Optional)*: End timestamp for date range filter
- **computer** `long` *(Optional)*: Filter devices connected to a particular computer. Resource IDs can be obtained from `/api/1.0/som/computers`
- **user** `long` *(Optional)*: Filter by user resource ID

## Sample Request

```curl
curl --request GET \
  --url https://appdomains/api/1.4/reports/dcm/filetrace \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

Response Body: `application/json`

- `JSON Object`
  - **message_type** `string`: Module code identifier
  - **message_response** `JSON Object`: Response data container
  - **message_version** `string`: API version
  - **status** `string`: Status of API call (success/failure)
  - **response_code** `integer`: HTTP response code

## Possible Response Codes

- **200** `HTTP code`

## Sample Response: HTTP 200

File trace report response

```json
{
  "response_code": 200,
  "message_type": "dcm",
  "message_response": {
    "total": 1,
    "limit": 25,
    "page": 1,
    "dcm": [
      {
        "created_time": 315513000000,
        "is_directory": 1,
        "extension": "folder",
        "file_name": "E:\\",
        "managedcomputer.friendly_name": "John",
        "domain_netbios_name": "WORKGROUP",
        "userresource.name": "John",
        "file_size": 0,
        "event_notified_time": 1755869433000,
        "device_name": "USB  SanDisk 3.2Gen1 USB Device",
        "event_type": 5,
        "modified_time": 315513000000,
        "operation_blocked": 0,
        "new_file_name": "",
        "process_name": "C:\\Windows\\explorer.exe",
        "accessed_time": 315513000000,
        "resource_name": "John"
      }
    ]
  },
  "message_version": "1.4",
  "status": "success"
}
```