COconductorone
Secrets Admin

Search Audit Events

Changed on

SearchAuditEvents returns audit events for paper secrets. Can filter by vault_id, actor (user ID or email), client IP.

post/api/v1/search/secrets-admin/audit_events

Request

  • Base URL
    https://example.conductor.one
  • URL
    https://example.conductor.one/api/v1/search/secrets-admin/audit_events
  • Auth
    HTTP bearer and OAuth 2
    Client credentials
    Token URL: /auth/v1/token

Request body

actorEmailstring

Filter by external email (partial match via full-text search)

actorUserIdstring

Filter by C1 user ID (internal users)

clientIpstring

Filter by client IP (exact match)

pageSizeinteger

The pageSize field.

pageTokenstring

The pageToken field.

vaultIdstring

Filter by specific vault

Response

Successful response

listobject[] nullable

List contains OCSF events directly as JSON structs. Follows the same pattern as SystemLogServiceListEventsResponse.

nextPageTokenstring

The nextPageToken field.

Changes