---
title: "List organization audit log entries"
method: GET
path: "/v2/organizations/{organization_id}/audit_log_entries"
tags: ["audit_log_entries"]
---

# List organization audit log entries

`GET /v2/organizations/{organization_id}/audit_log_entries`

## Request

- Base URL: `https://api.hubstaff.com`
- URL: `https://api.hubstaff.com/v2/organizations/{organization_id}/audit_log_entries`
- Auth: OAuth 2
  - Authorization code: `https://account.hubstaff.com/authorizations/new`
  - Token URL: `https://account.hubstaff.com/access_tokens` scopes: `hubstaff:read`, `hubstaff:write`
- TypeScript: <https://skmtc.dev/hubstaff/apis/hubstaff-v2-api/docs/v2/organizations/:organization_id/audit_log_entries/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a collection of audit log entries for the given organization.

Requires the organization to be on an Enterprise plan.
Requires Owner or Organization Manager role (with view others data permission).
Payment-scoped entries are visible only to Owners and Managers with the
manage billing permission.

Results can be filtered by created[start]/[stop], event_action, record_type,
subject_user_id, and ip.

Date range limit is 7 days. To walk a longer history,
slide the `created[start]`/`created[stop]` window across the retention range.

## Path parameters

- `organization_id` integer, required

## Query parameters

- `page_start_id` integer
- `page_limit` integer
- `created[start]` string, date-time, required
- `created[stop]` string, date-time, required
- `event_action` string
- `record_type` string
- `subject_user_id` integer
- `ip` string
- `include_removed_members` boolean
- `include_archived_projects` boolean

## Response `200`

A list of audit log entries

- object
  - `organization_audit_log_entries` OrganizationAuditLogEntry[]
    - `id` integer, required: Audit log entry ID
    - `organization_id` integer, required: Organization ID
    - `subject_user_id` integer, required: Subject user ID (may be null)
    - `action` string, required: The event action (e.g. location_changed)
    - `record_type` string, required: Record type the action was applied to
    - `record_id` integer, required: Record ID the action was applied to
    - `user_id` integer, required: Actor user ID (may be null for system-initiated changes)
    - `ip` string, required: IP address recorded with the event
    - `details` object, required: Action-specific details, whitelisted per action
    - `created_at` string, date-time, required: When the record was created
    - `updated_at` string, date-time, required: When the record was last updated

## Other responses

- `400`: Invalid parameters
- `401`: Unauthorized
- `403`: API access is only for organizations on an active plan
- `404`: Could not find record
- `429`: Rate limit exceeded

---

[API](https://skmtc.dev/hubstaff/apis/hubstaff-v2-api.md) - [All operations](https://skmtc.dev/hubstaff/apis/hubstaff-v2-api/llms.txt) - [OpenAPI document](https://skmtc.dev/hubstaff/apis/hubstaff-v2-api/revisions/c6b90e4e4bdc?raw)