---
title: "Get paginated audit log entries"
method: GET
path: "/admin/audit/log"
tags: ["admin"]
---

# Get paginated audit log entries

`GET /admin/audit/log`

## Query parameters

- `days` integer
- `start_date` string
- `end_date` string
- `requested_model` string
- `provider` string
- `method` string
- `path` string
- `user_path` string
- `error_type` string
- `status_code` integer
- `stream` boolean
- `search` string
- `limit` integer
- `offset` integer

## Response `200`

OK

- AdminAuditLogListResponse
  - `entries` AdminAuditLogEntryResponse[]
    - `alias_used` boolean
    - `auth_key_id` string
    - `auth_method` string
    - `cache_type` string
    - `client_ip` string
    - `data` AuditlogLogData
      - `api_key_hash` string
      - `error_code` string
      - `error_message` string — Error details (message can be long, so kept in JSON)
      - `failover` AuditlogFailoverSnapshot
        - `target_model` string
      - `max_tokens` integer
      - `request_body` unknown
      - `request_body_too_big_to_handle` boolean — Body capture status flags (set when body exceeds 1MB limit)
      - `request_headers` object — Optional headers (when LOGGING_LOG_HEADERS=true) Sensitive headers are auto-redacted
      - `response_body` unknown
      - `response_body_too_big_to_handle` boolean
      - `response_headers` object
      - `temperature` number — Request parameters
      - `user_agent` string — Identity
      - `workflow_features` AuditlogWorkflowFeaturesSnapshot
        - `audit` boolean
        - `budget` boolean
        - `cache` boolean
        - `fallback` boolean
        - `guardrails` boolean
        - `usage` boolean
    - `duration_ns` integer — DurationNs is the request duration in nanoseconds
    - `error_type` string
    - `id` string — ID is a unique identifier for this log entry (UUID)
    - `method` string
    - `path` string
    - `provider` string — canonical provider type used for routing and filters
    - `provider_name` string
    - `request_id` string — Extracted fields for efficient filtering (indexed in relational DBs)
    - `requested_model` string — Core fields (indexed for queries)
    - `resolved_model` string
    - `status_code` integer
    - `stream` boolean
    - `timestamp` string — Timestamp is when the request started
    - `usage` UsageRequestUsageSummary
      - `cache_write_input_tokens` integer
      - `cached_input_ratio` number
      - `cached_input_tokens` integer
      - `entries` integer
      - `estimated_cached_characters` integer
      - `input_tokens` integer
      - `output_tokens` integer
      - `total_tokens` integer
      - `uncached_input_tokens` integer
    - `user_path` string
    - `workflow_version_id` string
  - `limit` integer
  - `offset` integer
  - `total` integer

## Other responses

- `400` — Bad Request
- `401` — Unauthorized

## Changes

- **2026-05-09** `1236749560f3` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/enterpilot/apis/gomodel-api/changes/admin/audit/log/get.md)

---

[API](https://skmtc.dev/enterpilot/apis/gomodel-api.md) · [All operations](https://skmtc.dev/enterpilot/apis/gomodel-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/enterpilot/gomodel-api/revisions/aa549def1ff8/schema)