---
title: "Bulk export of audit events (ndjson or csv)"
method: GET
path: "/v1/audit/export"
tags: ["audit"]
---

# Bulk export of audit events (ndjson or csv)

`GET /v1/audit/export`

## Request

- Base URL: `https://api.ctindex.io`
- URL: `https://api.ctindex.io/v1/audit/export`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Streams up to 100k audit events matching the filter, suitable for SIEM ingestion. Same filtering shape as ``GET /v1/audit``, but ignores pagination — the entire matching window is dumped in one response. ``format=ndjson`` (default) emits one JSON object per line; ``format=csv`` emits a header row + CSV.

## Query parameters

- `since` string, date-time, nullable
- `until` string, date-time, nullable
- `event_type` string[], nullable
- `format` string

## Cookies

- `ctix_session` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ctindex/apis/certindex-api.md) · [All operations](https://skmtc.dev/ctindex/apis/certindex-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ctindex/apis/certindex-api/revisions/d5bc0ec85bc9?raw)