Sign in
AuditExport

Stream compliance audit export

Changed on

Streams a compliance-shaped audit export (ndjson or csv) for a bounded time window. Admin-only; gated by the siem_export or audit_export entitlement. The response is retention-aware: windows older than the configured retention + skew are rejected. The body carries SOC2 mapping columns when the operator has configured a mapping table.

get/api/v1/audit/export

Request

  • Base URL: http://localhost:8081
  • URL: http://localhost:8081/api/v1/audit/export
  • Auth: one of:
    • API key in header X-API-Key
    • HTTP bearer

Query parameters

fromstring date-time

Inclusive lower bound (RFC3339 timestamp)

tostring date-time

Exclusive upper bound (RFC3339 timestamp)

format'ndjson' | 'csv'

Output format

max_eventsinteger

Cap on events emitted (clamped to entitlement ceiling)

Headers

X-Tenant-IDstring required

Tenant isolation header (required on all protected routes).

Response

Streaming compliance export body (ndjson or csv)

Changes

  • 12120aad0bfeRevision changes
    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

  • 6da407adaac3Revision changes
    • info

      endpoint added