List audit logs
Changed onRetrieve a paginated list of authenticated user audit log entries for the account. Results are ordered newest first.
Access requirements:
- The caller must be an account admin.
- The account must have audit logging enabled.
Returns 403 if either condition is not met.
<Note>This endpoint is in beta, read more here.</Note>
Request
- Base URLhttps://api.arize.com
- URLhttps://api.arize.com/v2/audit-logs
- AuthHTTP bearer
Query parameters
Inclusive lower bound on created_at (ISO 8601 datetime). Defaults to 30 days before end_time when omitted.
Inclusive upper bound on created_at (ISO 8601 datetime). Defaults to the current time when omitted.
A universally unique identifier (base64-encoded opaque string).
Filter results by user (base64 global user ID). When provided, only records associated with this user are returned. Access requirements vary by endpoint — some endpoints restrict this filter to account admins.
Filter results to exact, case-sensitive operation names. Repeat this parameter to select more than one name. Keep the same names when requesting the next page.
The type of operation that was audited.
Filter results to a specific operation type.
Maximum items to return. Defaults to 50 if omitted; maximum is 100.
Opaque pagination cursor returned from a previous response (pagination.next_cursor). Treat it as an unreadable token; do not attempt to parse or construct it.
Response
A paginated list of audit log entries.
Example response
{
"logs": [
{
"id": "RW50aXR5OjEyMzQ1",
"user_id": "RW50aXR5OjEyMzQ1",
"ip": "1.2.3.4",
"operation_name": "createAiIntegration",
"operation_text": "mutation createAiIntegration { ... }",
"variables": "{}",
"created_at": "2026-05-18T12:00:00.000Z"
}
]
}Changes
- breaking
for the
queryrequest parameteroperation_name, the maxItems was decreased from50to20
- breaking
- info
added the new optional
queryrequest parameteroperation_name
- info