Api referenceEndpointsAudit
The tenant's audit log, newest first
GET
One event per authenticated request (tenant key or user token) and per
administrative or system action: who (the credential), what (the action
and route), about which user, when, and the status. Never a health value,
a secret or a query string. Append only; events older than
OHS_AUDIT_RETENTION_DAYS (default 365) are pruned.
tenantKeyheader
AuthorizationBearer <token>Tenant API key, ohs_sk_ + 43 base62 characters.
user_id?stringOnly events about this end user.
Format
uuidaction?stringAn exact action (data.export), or a prefix ending in a dot (data.).
since?stringEvents at or after this time (RFC 3339 or YYYY-MM-DD).
until?stringEvents before this time (RFC 3339 or YYYY-MM-DD).
cursor?stringThe next_cursor of the previous page.
limit?integerRange
1 <= value <= 1000Default
100One page of events.
application/json- response
data*array<>next_cursor*|Null on the last page.
curl -X GET 'http://localhost:8080/v1/audit' \ -H 'Authorization: Bearer ohs_sk_...'{ "next_cursor": "string", "data": [ { "id": 0, "at": "2019-08-24T14:15:22Z", "actor": { "type": "api_key", "id": "string" }, "action": "string", "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5", "method": "string", "route": "string", "status": 0, "request_id": "string", "detail": {} } ]}