---
title: "Update Audit Log Webhook"
method: PATCH
path: "/v2/audit-log-webhook"
tags: ["Audit Logs"]
---

# Update Audit Log Webhook

`PATCH /v2/audit-log-webhook`

Updates the configuration for a webhook to receive audit logs.

## Request body

- object
  - `endpoint` string, nullable — The endpoint that will receive audit log messages.
  - `authorization` string, nullable — The value to include in the `Authorization` header when sending audit logs to the webhook.
  - `enabled` boolean — Indicates if the data should be sent to the webhook.
  - `log_format` 'cef' | 'json' | 'cps' — The output format of each log messages.
  - `skip_ssl_verification` boolean — Indicates if the SSL certificate verification of the host endpoint should be skipped when delivering payloads. We strongly recommend not setting this to 'true' as you are subject to man-in-the-middle and other attacks. This option should be considered only for self-signed SSL certificates used in a non-production environment.

## Response `200`

Get response for audit log webhook

- object
  - `endpoint` string, nullable — The endpoint that will receive audit log messages.
  - `enabled` boolean, nullable — Indicates whether audit data should be sent to the webhook.
  - `log_format` 'cef' | 'json' | 'cps' — The output format of each log messages.
  - `skip_ssl_verification` boolean — Indicates if the SSL certificate verification of the host endpoint should be skipped when delivering payloads.
  - `updated_at` string, date-time — Timestamp when this webhook was last updated. Initial value is 0001-01-01T00:00:0Z.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden

## Changes

> 52 revisions in range; 2 could not be searched.

- **2025-10-29** `19e869275e28` — 1 warning
  - added the new `type` enum value to the `allOf[subschema #2]/invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterStandard]/rule` response property for the response status `400`
- **2025-08-22** `96118a9cd7f4` — 11 breaking, 5 info
  - the response property `allOf[subschema #2]/invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterChoiceItem]/source` became nullable for the status `400`
  - the response property `allOf[subschema #2]/invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterDependentItem]/source` became nullable for the status `400`
  - the response property `allOf[subschema #2]/invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterMaximumLength]/source` became nullable for the status `400`
  - the response property `allOf[subschema #2]/invalid_parameters/items/oneOf[#/components/schemas/InvalidParameterMinimumLength]/source` became nullable for the status `400`
  - …12 more
- **2025-06-27** `9f695af25102` — 1 warning, 1 info
  - added the new `cps` enum value to the `log_format` response property for the response status `200`
  - added the new `cps` enum value to the request property `log_format`
- **2025-06-19** `60ce7598bbd0` — 2 info
  - the `log_format` request property default value `cef` was added
  - the `log_format` response's property default value `cef` was added for the status `200`
- …earlier changes not shown

[Full history](https://skmtc.dev/kong/apis/konnect-api/changes/v2/audit-log-webhook/patch.md)

---

[API](https://skmtc.dev/kong/apis/konnect-api.md) · [All operations](https://skmtc.dev/kong/apis/konnect-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kong/konnect-api/revisions/72502a676a92/schema)