---
title: "Retrieve audit logs"
method: GET
path: "/get_audit_logs"
tags: ["Organization"]
---

# Retrieve audit logs

`GET /get_audit_logs`

This endpoint retrieves audit logs for all users in an organization for a specified time period.

## Query parameters

- `organization_id` string, required
- `user_id` string, required
- `start_time` string, date-time, required
- `end_time` string, date-time, required
- `page` integer
- `page_size` integer

## Response `200`

Successful retrieval of organization audit logs

- object
  - `audit_logs` object[]
    - `event_id` string — Unique identifier for the audit log event.
    - `timestamp` string, date-time — When the event occurred.
    - `event_type` string — Type of event that was logged.
    - `user_id` string — ID of the user who performed the action.
    - `details` string — Additional details about the event.
    - `source_ip` string — IP address from which the action was performed.
    - `user_agent` string — User agent information from the request.
  - `total_count` integer — Total number of matching audit logs.
  - `page` integer — Current page number.
  - `page_size` integer — Number of records per page.
  - `total_pages` integer — Total number of pages available.

## Other responses

- `400` — Bad request (missing required parameters)
- `401` — Unauthorized (missing or invalid API key)
- `403` — Forbidden (user is not an organization admin)
- `404` — Organization not found
- `500` — Internal server error

---

[API](https://skmtc.dev/gumloop/apis/public-api.md) · [All operations](https://skmtc.dev/gumloop/apis/public-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/gumloop/public-api/revisions/115f2d6ce387/schema)