---
title: "Retrieve audit logs"
method: GET
path: "/account-info/2026-03/activity/audit-logs"
tags: ["Basic"]
---

# Retrieve audit logs

`GET /account-info/2026-03/activity/audit-logs`

## Request

- Base URL: `https://api.hubapi.com`
- URL: `https://api.hubapi.com/account-info/2026-03/activity/audit-logs`
- Auth: one of:
  - HTTP bearer
  - API key in query parameter `hapikey`
  - none

Retrieve activity history for user actions related to approvals, content updates, CRM object updates, security activity, and more (Enterprise only). Learn more about [activities included in audit log exports](https://knowledge.hubspot.com/account-management/view-and-export-account-activity-history-in-a-centralized-audit-log?hubs_content=knowledge.hubspot.com/account-management/view-and-export-account-activity-history&hubs_content-cta=centralized%20audit%20log#data-included-in-the-centralized-audit-log).

## Query parameters

- `actingUserId` integer[]
- `after` string
- `fillFinalTimestamp` boolean
- `limit` integer
- `occurredAfter` string, date-time
- `occurredBefore` string, date-time
- `sort` string[]

## Response `200`

successful operation

- AccountActivityCollectionResponsePublicApiUserActionEventForwardPaging
  - `paging` ForwardPaging
    - `next` NextPage: Specifies the paging information needed to retrieve the next set of results in a paginated API response
      - `after` string, required: A paging cursor token for retrieving subsequent pages.
      - `link` string: A URL that can be used to retrieve the next page results.
  - `results` AccountActivityPublicApiUserActionEvent[], required
    - `actingUser` AccountActivityActingUser, required
      - `userEmail` string: The email address of the user who performed the action.
      - `userId` integer, required: The user's unique ID.
    - `action` string, required: The type of action taken.
    - `category` string, required: The category of the activity.
    - `id` string, required: The login activity's unique ID.
    - `occurredAt` string, date-time, required: The time that the action occurred at.
    - `subCategory` string: The subcategory of the activity.
    - `targetObjectId` string: The ID of the impacted object.

## Other responses

- `default`: An error occurred.

## Changes

> 14 revisions in range; 1 not diffed, 2 could not be searched.

- **2026-03-30** `dc2fdad57f7f`: 1 info
  - api operation id `get-/account-info/2026-03/activity/audit-logs_/account-info/2026-03/activity/audit-logs` removed and replaced with `get-/account-info/2026-03/activity/audit-logs`
- **2026-03-20** `e68736346c92`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/hubspot/apis/hubspot-api-specification/changes/account-info/2026-03/activity/audit-logs/get.md)

---

[API](https://skmtc.dev/hubspot/apis/hubspot-api-specification.md) - [All operations](https://skmtc.dev/hubspot/apis/hubspot-api-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/hubspot/apis/hubspot-api-specification/revisions/f9c7181056c5?raw)