---
title: "GET /analytics/logs/package/{workspace}/"
method: GET
path: "/analytics/logs/package/{workspace}/"
tags: ["analytics"]
---

# GET /analytics/logs/package/{workspace}/

`GET /analytics/logs/package/{workspace}/`

Returns package log events, including uploads, copies, deletes, etc.

## Path parameters

- `workspace` string, required

## Query parameters

- `end_time` string, date-time
- `event_action` string[]
- `event_actor` string[]
- `event_actor_type` string[]
- `format` 'csv' | 'json'
- `package` string[]
- `package_format` string[]
- `page` integer
- `page_size` integer
- `query` string
- `repository` string[]
- `start_time` string, date-time

## Response `200`

- PaginatedPackageLogsResponseList
  - `results` PackageLogsResponse[], required
    - `event_at` string, date-time, required — Timestamp when the event occurred.
    - `event_action` 'SYNC' | 'DELETE' | 'COPY' | 'MOVE' | 'RESYNC' | 'REPUBLISH' | 'UNPUBLISH' | 'TAGS_CHANGED' | 'QUARANTINE' | 'RESTORE' | 'POLICY_VIOLATION' | 'HARD_DELETE', required — * `SYNC` - sync * `DELETE` - delete * `COPY` - copy * `MOVE` - move * `RESYNC` - resync * `REPUBLISH` - republish * `UNPUBLISH` - unpublish * `TAGS_CHANGED` - tags changed * `QUARANTINE` - quarantined * `RESTORE` - restored * `POLICY_VIOLATION` - policy violation * `HARD_DELETE` - hard delete
    - `package` PackageLogPackage, required — Details of a package in a package log event.
      - `slug_perm` string, required — Unique identifier of the package.
      - `name` string, required — Name of the package.
      - `version` string, required — Version of the package.
      - `format` 'DEB' | 'RPM' | 'RUBY' | 'PYTHON' | 'MAVEN' | 'BOWER' | 'DOCKER' | 'RAW' | 'CHOCOLATEY' | 'NPM' | 'NUGET' | 'VAGRANT' | 'COMPOSER' | 'ALPINE' | 'HELM' | 'CONAN' | 'CARGO' | 'LUAROCKS' | 'CRAN' | 'GO' | 'DART' | 'COCOAPODS' | 'TERRAFORM' | 'P2' | 'CONDA' | 'HEX' | 'SWIFT' | 'HUGGINGFACE' | 'GENERIC' | 'VSX' | 'MCP' | 'NIX' | 'DEFAULT', required — * `DEB` - Debian * `RPM` - RedHat * `RUBY` - Ruby * `PYTHON` - Python * `MAVEN` - Maven * `BOWER` - Bower * `DOCKER` - Docker * `RAW` - Raw * `CHOCOLATEY` - Chocolatey * `NPM` - npm * `NUGET` - NuGet * `VAGRANT` - Vagrant * `COMPOSER` - Composer * `ALPINE` - Alpine * `HELM` - Helm * `CONAN` - Conan * `CARGO` - Cargo * `LUAROCKS` - LuaRocks * `CRAN` - CRAN * `GO` - Go * `DART` - Dart * `COCOAPODS` - CocoaPods * `TERRAFORM` - Terraform * `P2` - P2 * `CONDA` - Conda * `HEX` - Hex * `SWIFT` - Swift * `HUGGINGFACE` - HuggingFace * `GENERIC` - Generic * `VSX` - VSX * `MCP` - MCP * `NIX` - Nix * `DEFAULT` - Default
      - `size` integer, required — Size of the package in bytes.
    - `repository` PackageLogRepository — Details of a repository in a package log event.
      - `slug_perm` string, nullable — Unique identifier of the repository containing the package.
      - `slug` string, nullable — Slug of the repository containing the package.
      - `name` string, nullable — Name of the repository containing the package.
    - `event_actor` PackageLogEventActor — Details of the actor that performed the package log event.
      - `slug_perm` string, nullable — User unique identifier.
      - `slug` string, nullable — User slug.
      - `email` string, nullable — User email.
      - `user_type` 'USER' | 'SERVICE' — * `USER` - User * `SERVICE` - Service
    - `event_location` string, nullable — Location where the event occurred.
    - `was_deleted_by_retention_rule` boolean, required — Whether the package was deleted by a retention rule.
    - `event_context` string, required — Additional human-readable context for the event, such as tag change details. May be empty, or formatted like "Updated from 'X' to 'Y'", "Changed to 'Y'", or "Cleared from 'X'".

---

[API](https://skmtc.dev/cloudsmith/apis/cloudsmith-api.md) · [All operations](https://skmtc.dev/cloudsmith/apis/cloudsmith-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudsmith/cloudsmith-api/revisions/0d6c8fe92b9f/schema)