audit-logs

Retrieve audit log records for the authenticated user's organization in OCSF format.

Requires both start_time and end_time parameters to filter logs within a date range. Supports cursor-based pagination.

Returns results in OCSF API Activity (Class UID: 6003) format, which is compatible with security monitoring and SIEM tools. Reference: https://schema.ocsf.io/1.7.0/classes/api_activity

get/api/v1/audit-logs

Request

  • Base URL
    https://api.smith.langchain.com
  • URL
    https://api.smith.langchain.com/api/v1/audit-logs
  • Auth
    • API key in header X-API-Key
    • or API key in header X-Organization-Id
    • or HTTP bearer

Query parameters

limitinteger

Number of items to return

cursorstring nullable

Cursor for pagination (base64-encoded JSON string)

workspace_idstring uuid nullable

Filter by workspace ID

start_timestring date-time required

Start datetime (inclusive) in ISO 8601 format

end_timestring date-time required

End datetime (inclusive) in ISO 8601 format

operationsAuditLogOperation[] nullable

Filter by operation names. If omitted, all operations are returned.

actor_ls_user_idsstring[] nullable

Filter by human actor (ls_user_id).

actor_api_key_idsstring[] nullable

Filter by API key actor (api_key_id).

resource_idsstring[] nullable

Filter by resource ID. Matches if any resource ID is present on the log.

Response

Successful Response

cursorstring nullable required

Changes

    • warning

      added the new cancel_taskset_run enum value to the /// response property for the response status

    • info

      added the enum value cancel_taskset_run to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • warning

      added the new create_taskset enum value to the /// response property for the response status

    • warning

      added the new create_taskset_run enum value to the /// response property for the response status

    • warning

      added the new create_taskset_task enum value to the /// response property for the response status

    • warning

      added the new create_taskset_task_version enum value to the /// response property for the response status

    • warning

      added the new create_taskset_version enum value to the /// response property for the response status

    • warning

      added the new create_taskset_world enum value to the /// response property for the response status

    • warning

      added the new create_taskset_world_version enum value to the /// response property for the response status

    • warning

      added the new delete_taskset enum value to the /// response property for the response status

    • warning

      added the new delete_taskset_task enum value to the /// response property for the response status

    • warning

      added the new download_taskset_bundle enum value to the /// response property for the response status

    • warning

      added the new get_taskset_task_file_content enum value to the /// response property for the response status

    • warning

      added the new get_taskset_world_file_content enum value to the /// response property for the response status

    • warning

      added the new update_taskset enum value to the /// response property for the response status

    • info

      added the enum value create_taskset to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value create_taskset_run to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value create_taskset_task to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value create_taskset_task_version to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value create_taskset_version to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value create_taskset_world to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value create_taskset_world_version to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value delete_taskset to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value delete_taskset_task to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value download_taskset_bundle to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value get_taskset_task_file_content to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value get_taskset_world_file_content to the property anyOf[subschema #1]/items/ of the query request parameter operations

    • info

      added the enum value update_taskset to the property anyOf[subschema #1]/items/ of the query request parameter operations