BAbasedash
Organizations

List audit log events

Returns immutable organization audit events in reverse chronological order for SIEM ingestion. Requires an Enterprise organization and an administrator API key.

get/api/public/organizations/{orgId}/audit-logs

Request

  • Base URL
    https://charts.basedash.com
  • Auth
    HTTP bearer

Path parameters

orgIdstring required

Organization ID

Query parameters

limitinteger

Maximum number of items to return (1-100, default 50)

cursorstring

Cursor for pagination (ID of the last item from previous page)

action'user.login' | 'user.logout' | 'member.joined' | 'member.invited' | 'member.invite_revoked' | 'member.role_changed' | 'member.deactivated' | 'member.reactivated' | 'group.created' | 'group.updated' | 'group.deleted' | 'group.member_added' | 'group.member_removed' | 'group.login_token_synced' | 'grant.created' | 'grant.updated' | 'grant.deleted' | 'data_source.created' | 'data_source.updated' | 'data_source.deleted' | 'data_source.sync_requested' | 'data_source.schema_synced' | 'data_source.credentials_viewed' | 'catalog.description_updated' | 'api_key.created' | 'api_key.renamed' | 'api_key.revoked' | 'scim_token.created' | 'scim_token.deleted' | 'organization.created' | 'organization.updated' | 'organization.jwt_secret_viewed' | 'organization.jwt_secret_copied' | 'organization.billing_account_attached' | 'organization.billing_account_detached' | 'domain.created' | 'domain.updated' | 'domain.deleted' | 'dashboard.created' | 'dashboard.deleted' | 'dashboard.archived' | 'dashboard.restored' | 'dashboard.public_sharing_enabled' | 'dashboard.public_sharing_disabled' | 'dashboard.public_sharing_link_reset' | 'dashboard.verified' | 'dashboard.unverified' | 'automation.created' | 'automation.deleted' | 'automation.archived' | 'automation.restored' | 'automation.updated' | 'chart.query_saved' | 'chart.settings_saved' | 'subscription.created' | 'subscription.updated' | 'subscription.archived' | 'mcp_connector.created' | 'mcp_connector.updated' | 'mcp_connector.deleted' | 'mcp_connector.tool_access_updated' | 'public_api.request' | 'scim.user_created' | 'scim.user_updated' | 'scim.user_deactivated' | 'scim.group_created' | 'scim.group_updated' | 'scim.group_deleted' | 'query.executed' | 'query.mutating_executed' | 'query.staff_explained' | 'data.exported' | 'ai.tool_executed' | 'ai_context.global_updated' | 'ai_skill.created' | 'ai_skill.updated' | 'ai_skill.deleted' | 'model.created' | 'model.updated' | 'model.archived' | 'model.restored' | 'org_permission.updated' | 'org_permission.reset'

Exact dot-namespaced action

actorIdstring

Actor user ID

category'AUTHENTICATION' | 'MEMBERS' | 'ACCESS_CONTROL' | 'DATA_SOURCES' | 'QUERIES' | 'EXPORTS' | 'AI' | 'ORGANIZATION' | 'CONTENT' | 'INTEGRATIONS'
string date-time
OR
string date
searchstring

Case-insensitive actor, action, target name, or target ID search

source'WEB' | 'PUBLIC_API' | 'SCIM' | 'SLACK' | 'MCP' | 'SYSTEM' | 'PUBLIC_DASHBOARD'
targetTypestring

Exact target resource type

string date-time
OR
string date

Response

Audit events retrieved successfully

Changes

No recorded changes to this operation across all 1 revision of this API.