---
title: "GET /audit-rules/{id}/events/"
method: GET
path: "/audit-rules/{id}/events/"
tags: ["audit-rules"]
---

# GET /audit-rules/{id}/events/

`GET /audit-rules/{id}/events/`

Event list of a fired rule by its id

## Path parameters

- `id` integer, required

## Query parameters

- `ordering` string
- `page` integer
- `page_size` integer
- `source_name` string

## Response `200`

- PaginatedAuditEventList
  - `count` integer
  - `next` string, uri, nullable
  - `previous` string, uri, nullable
  - `page_size` integer, nullable
  - `page` integer, nullable
  - `results` AuditEvent[]
    - `id` string, uuid, required — UUID of the triggered event
    - `source_name` string, required — Name of the source
    - `source_type` string, required — Type of the source
    - `payload` string, nullable — The payload in the event
    - `audit_actions` string[], required
    - `received_at` string, date-time, required — The received timestamp of the event
    - `rule_fired_at` string, date-time, nullable

## Changes

- **2024-04-23** `cbf68ddd9760` — 2 breaking, 3 info
  - the response property `results/items/payload` became nullable for the status `200`
  - the `results/items/payload` response's property type/format changed from `object`/`` to `string`/`` for status `200`
  - the endpoint scheme security `EDAJWTAuthentication` was added to the API
  - the endpoint scheme security `jwtAuth` was added to the API
  - …1 more
- **2023-08-21** `c84b4813cab1` — 2 info
  - the endpoint scheme security `cookieAuth` was added to the API
  - added the new optional `query` request parameter `source_name`
- **2023-05-19** `f84d9240fdf2` — 1 info
  - the endpoint scheme security `cookieAuth` was removed from the API
- **2023-04-25** `62d33b790834` — 1 breaking, 2 warning, 2 info
  - the `results/items/payload` response's property type/format changed from `string`/`` to `object`/`` for status `200`
  - deleted the `query` request parameter `ordering`
  - deleted the `query` request parameter `source_name`
  - the endpoint scheme security `EDAJWTAuthentication` was removed from the API
  - …1 more

[Change history](https://skmtc.dev/ansible/apis/event-driven-ansible-api/changes/audit-rules/:id/events/get.md)

---

[API](https://skmtc.dev/ansible/apis/event-driven-ansible-api.md) · [All operations](https://skmtc.dev/ansible/apis/event-driven-ansible-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ansible/event-driven-ansible-api/revisions/c04fc5f09692/schema)