---
title: "Get Samba audit logs"
method: GET
path: "/samba/audit-logs"
tags: ["Samba"]
---

# Get Samba audit logs

`GET /samba/audit-logs`

Retrieve paginated Samba audit logs

## Query parameters

- `page` integer
- `size` integer
- `sort[0][field]` 'id' | 'action' | 'share' | 'user' | 'client' | 'ip' | 'path' | 'target' | 'occurrences' | 'createdAt' | 'created_at'
- `sort[0][dir]` 'asc' | 'desc'

## Response `200`

Success

- GithubComAlchemillahqSylveInternalAPIResponseGithubComAlchemillahqSylveInternalInterfacesServicesSambaAuditLogsResponse
  - `data` GithubComAlchemillahqSylveInternalInterfacesServicesSambaAuditLogsResponse
    - `data` GithubComAlchemillahqSylveInternalDbModelsSambaSambaAuditLog[]
      - `action` string
      - `client` string
      - `createdAt` string
      - `folder` string
      - `id` integer
      - `ip` string
      - `occurrences` integer
      - `path` string
      - `result` string
      - `retentionDays` integer
      - `share` string
      - `shareId` integer
      - `target` string
      - `user` string
    - `last_page` integer
  - `error` string
  - `message` string
  - `status` string

## Other responses

- `500` — Internal Server Error

## Changes

- **2026-08-12** `9a5026bf9057` — 1 warning, 1 info
  - deleted the `query` request parameter `hash`
  - the endpoint scheme security `BearerAuth` was added to the API
- **2025-08-14** `0e0247c98990` — 1 info
  - endpoint added
- **2025-03-11** `2b736ca1b025` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/alchemillahq/apis/sylve-api/changes/samba/audit-logs/get.md)

---

[API](https://skmtc.dev/alchemillahq/apis/sylve-api.md) · [All operations](https://skmtc.dev/alchemillahq/apis/sylve-api/llms.txt) · [OpenAPI document](https://skmtc.dev/alchemillahq/apis/sylve-api/revisions/6d4b8bb77d9a?raw)