Developers
Audit entries

Retrieve an audit entry

GET/audit-entries/{audit_entry_id}

Retrieves an audit entry by its public ID, which uses the aud_ prefix (for example, aud_42).

Malformed IDs and entries that do not exist or are not accessible with the current credentials return 404 Not Found.

Authorization

AuthorizationBearer <token>

Autonomous mode: the API credential secret, sent as a bearer token. Credential secrets are identified by a fixed prefix.

In: header

Path Parameters

audit_entry_id*string

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/audit-entries/string"
{  "data": {    "action": "string",    "actor": {      "admin_id": "string"    },    "client_request_id": "string",    "credential": {      "id": "string"    },    "diff": {},    "event_id": "string",    "http_status": 0,    "id": "string",    "item_key": "string",    "kind": "request",    "method": "string",    "object": "audit_entry",    "occurred_at": "2019-08-24T14:15:22Z",    "operation_id": "string",    "origin": {      "client": {        "install_id": "string",        "name": "string",        "version": "string"      },      "ip": "string",      "ip_source": "trusted_proxy",      "user_agent": "string"    },    "outcome": "succeeded",    "path": "string",    "recorded_at": "2019-08-24T14:15:22Z",    "request_id": "string",    "resource": {      "id": "string",      "object": "string"    }  }}

List audit entries GET

Lists the audit entries of the current account: write operations, denied or rejected requests, background effects, and management actions. Successful read requests are not included; they are available through the Requests endpoints. Results are paginated by cursor and sorted by `occurred_at`, newest first by default. The collection can be filtered by kind, outcome, action code, resource, request ID, and occurrence time range. Requires the `audit.read` permission for the account.