audit-logs

get

Lists audit log records.

Authorizations

AuthorizationstringRequired

The bearer token can be obtained by creating a ServiceAccount.

Query parameters

pagination_cursorstringOptional

Cursor for pagination. Pass next_cursor from previous response.

limitintegerOptional

Maximum number of items to return. Greater than 0, less than 1000.

Default: 25

fromstring · date-timeOptional

Filter logs from this timestamp (inclusive).

tostring · date-timeOptional

Filter logs until this timestamp (exclusive).

principalstringOptional

Filter by principal name.

operation_idstringOptional

Filter by operation ID (e.g., createUser).

sort_orderstring · enumOptional

Sort order by timestamp. Defaults to descending (most recent first).

Default: descPossible values:

Responses

200

List of audit log records.

application/json

Paginated list of audit logs using cursor-based pagination.

next_cursorstringOptional

Opaque cursor for fetching the next page. Absent if no more results.

default

Error object.

application/json

get/api/v1/audit-logs

GET /api/v1/audit-logs HTTP/1.1
Host: api.example.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "items": [
    {
      "id": "text",
      "timestamp": "2026-01-01T00:00:00.000Z",
      "principal": "text",
      "delegation_info": {
        "oauth2_authorization_id": "text",
        "app_name": "text",
        "app_display_name": "text"
      },
      "operation_id": "text",
      "resource_lrn": "text",
      "request": {
        "ANY_ADDITIONAL_PROPERTY": "anything"
      },
      "response": {
        "ANY_ADDITIONAL_PROPERTY": "anything"
      }
    }
  ],
  "next_cursor": "text"
}

delete

Deletes audit log records up to the given timestamp.

Authorizations

AuthorizationstringRequired

The bearer token can be obtained by creating a ServiceAccount.

Query parameters

beforestring · date-timeRequired

Delete logs with timestamp before this value (exclusive).

Responses

204

Audit logs deleted successfully.

No content

default

Error object.

application/json

delete/api/v1/audit-logs

DELETE /api/v1/audit-logs?before=2026-01-01T00%3A00%3A00.000Z HTTP/1.1
Host: api.example.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

No content