Digital Ocean needs at least a basic mechanism to allow for incremental importing of actions so that a SIEM can periodically ingest just the latest ones. At present the Actions endpoint of the Digital Ocean API only supports "List All Actions" or "Retrieve an Existing Action", with no ability to request all actions since a particular point in time. This is a fairly common audit logging API feature these days, and would really raise the value of the Digital Ocean platform for uses cases where SIEM ingestion and monitoring of a customer's cloud platform administrative activity would be a requirement.

Thanks for your consideration,

Kevin