---
title: "Get audit log"
method: GET
path: "/api/audit-logs/{auditLogId}"
tags: ["Audit log"]
---

# Get audit log

`GET /api/audit-logs/{auditLogId}`

Retrieve a single audit log entry by ID, including the full data payload.

## Path parameters

- `auditLogId` string, uuid, required

## Response `200`

Audit log entry with full details

- object — Audit log entry with full details
  - `id` string, uuid, required — Unique identifier of the audit log entry
  - `createdAt` string, required — Timestamp when the action was performed
  - `type` 'organisation' | 'user' | 'group' | 'accessToken' | 'project' | 'document' | 'release' | 'member' | 'personalAccessToken', required — Category of the audited resource
  - `action` string, required — Specific action that was performed
  - `ipAddress` string, nullable, required — IP address of the client that performed the action
  - `userAgent` string, nullable, required — User agent of the client that performed the action
  - `refId` string, nullable, required — Reference ID of the affected resource
  - `user` object, nullable — User who performed the action
    - `id` string, uuid, required
    - `email` string, email, required
    - `firstName` string, nullable, required
    - `lastName` string, nullable, required
  - `project` object, nullable — Project associated with the audit log entry
    - `id` string, uuid, required
    - `name` string, required
  - `data` unknown
  - `organisationId` string, uuid, nullable, required — Organisation ID associated with the audit log

---

[API](https://skmtc.dev/gorules/apis/gorules-agent-api.md) · [All operations](https://skmtc.dev/gorules/apis/gorules-agent-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gorules/gorules-agent-api/revisions/52c0773fcd80/schema)