Tenant Administrator IP in Logs

I tried programmatically resetting MFA using Auth0 management API and providing IP address in “auth0-forwarded-for” header. But looks like this does not fall under Anomaly events so I do not see the IP address in logs.

What are my options here to get the tenant admin IP that performed the action?
One of the ways I can think of is to set up an endpoint on my server that calls Auth0 management API. This way I can get the IP address of person making request to my server. This seems a bit over-engineered though.

Is there any Auth0 native way to do/enable this?