---
title: "Get a logging destination"
method: GET
path: "/observability-destination/{id}"
tags: ["Logging destinations"]
---

# Get a logging destination

`GET /observability-destination/{id}`

## Request

- Base URL: `https://api.elaichi.ai`
- URL: `https://api.elaichi.ai/observability-destination/{id}`
- Auth: HTTP bearer

Returns one logging destination. Requires `logging:view`. Secrets are never included.

## Path parameters

- `id` string, required

## Headers

- `X-Organization-Id` string

## Response `200`

OK

- object: Where the org audit trail is forwarded. Secrets are write-only and never appear in any response.
  - `id` string: Logging destination id (`ldst_…`).
  - `type` 'datadog' | 'splunk_hec' | 'sentinel': Immutable after creation — to switch providers, create a new destination.
  - `name` string
  - `is_active` boolean: Paused destinations keep their config but forward nothing.
  - `config` object: Non-secret provider settings.
    - `site` 'us1' | 'us3' | 'us5' | 'eu' | 'ap1': Datadog site.
    - `tags` string[]
    - `log_types` string[]: Which slices of the audit trail to forward: `tool_call` = MCP/tool executions, `auth` = membership, role, invite and credential events, `admin` = everything else.
  - `last_test_at` string, date-time, nullable
  - `last_test_status` 'ok' | 'failed' | 'null', nullable
  - `created_at` string, date-time
  - `updated_at` string, date-time

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not found
- `429`: Rate limited

---

[API](https://skmtc.dev/elaichi/apis/elaichi-api.md) · [All operations](https://skmtc.dev/elaichi/apis/elaichi-api/llms.txt) · [OpenAPI document](https://skmtc.dev/elaichi/apis/elaichi-api/revisions/b22cfb7b6d15?raw)