Get Event Monitoring Content from a Record

Use the sObject Blob Retrieve resource to retrieve BLOB data for a given record.

You can use REST API to retrieve BLOB data for event monitoring. Use a GET request similar to this:

Event monitoring content is returned in binary form. Note that the response content type won’t be JSON or XML because the returned data is binary.