beta.admin.audit-logs

List audit log entries for the Organization.

get/v1/admin/audit-logs

Request

Query parameters

actor_typeActorType[] nullable

Actor types to include in the audit log results.

event_typeAuditLogEventType[] nullable

Event types to include in the audit log results.

target_typeTargetType[] nullable

Target resource types to include in the audit log results.

actor_user_uuidstring nullable

Filter logs by the UUID of the user who performed the action.

sort'ascending' | 'descending'

Sort order for audit log entries.

afterstring date-time nullable

Return audit log entries after this time.

beforestring date-time nullable

Return audit log entries before this time.

limitinteger

Maximum number of results to return.

Response

OK

created_atstring date-time required

Time when the audit log entry was created.

actor_type'HUMAN' | 'API_KEY' | 'ADMIN_API_KEY' | 'SERVICE_ACCOUNT' | 'OTHER' required
actor_metadataobject required

Details about who performed the action.

event_type'user.create' | 'user.delete' | 'user.log_in' | 'user.info.update' | 'user.password.update' | 'user.phone_number.verify' | 'user.organization.leave' | 'user.organization.role.update' | 'user.organization.delete' | 'user.organization.join' | 'organization.create' | 'organization.delete' | 'organization.update' | 'organization.invite.send' | 'organization.invite.resend' | 'organization.invite.accepted' | 'organization.invite.revoked' | 'organization.join_by_email_domain' | 'organization.domain_verification.disable' | 'organization.domain_verification.enable' | 'organization.email_domain_authentication.enable' | 'organization.email_domain_authentication.disable' | 'organization.saml_authentication.enable' | 'organization.saml_authentication.disable' | 'organization.saml_authentication.sso_user_provisioning.update' | 'organization.scim_sync.trigger' | 'organization.scim.secret.rotate' | 'organization.seat_auto_assign.enable' | 'organization.seat_auto_assign.disable' | 'organization.kind.update' | 'organization.sso_seat_auto_assign.enable' | 'organization.sso_seat_auto_assign.disable' | 'workspace.create' | 'workspace.update' | 'workspace.delete' | 'workspace.member.add' | 'workspace.member.remove' | 'workspace.member.role.update' | 'user_group.create' | 'user_group.update' | 'user_group.delete' | 'user_group.member.add' | 'user_group.member.remove' | 'user_group.workspace.provision' | 'user_group.workspace.deprovision' | 'user_group.workspace.update' | 'billing.information.updated' | 'billing.payment_method.added' | 'billing.payment_method.removed' | 'billing.payment_method.default_changed' | 'billing.invoice.retried' | 'billing.subscription.subscribe' | 'billing.subscription.unsubscribe' | 'billing.subscription.cancel_unsubscribe' | 'billing.subscription.add_seats' | 'billing.subscription.remove_seats' | 'billing.subscription.termination_date.updated' | 'billing.credits.added' | 'billing.gift_code.used' | 'billing.credit_coupon.used' | 'billing.subscription_coupon.used' | 'billing.monthly_limit.updated' | 'billing.workspace_monthly_limit.updated' | 'billing.shared_budget_override.updated' | 'billing.auto_recharge.updated' | 'billing.seat.grant' | 'billing.seat.revoke' | 'billing.priority_service_tier.updated' | 'billing.priority_service_tier.removed' | 'le_chat.conversation.created' | 'le_chat.temporary_conversation.created' | 'le_chat.temporary_conversation.converted' | 'le_chat.conversation.deleted' | 'le_chat.conversation_batch.deleted' | 'le_chat.conversation.public_sharing.enabled' | 'le_chat.conversation.public_sharing.disabled' | 'le_chat.flash_answers.enabled' | 'le_chat.flash_answers.disabled' | 'le_chat.localisation_sharing.enabled' | 'le_chat.localisation_sharing.disabled' | 'le_chat.memories.enabled' | 'le_chat.memories.disabled' | 'le_chat.data.training_enabled' | 'le_chat.data.training_disabled' | 'le_chat.actions.external_link' | 'admin_api_key.created' | 'admin_api_key.delete' | 'api_key.create' | 'api_key.rotate' | 'api_key.delete' | 'api_key_policy.update' | 'secret_store.entry.create' | 'secret_store.entry.update' | 'secret_store.entry.delete' | 'service_account.create' | 'service_account.update' | 'service_account.delete' | 'service_account.client_secret.create' | 'service_account.client_secret.delete' | 'service_account.roles.set' | 'workload_identity.credential_registration.create' | 'workload_identity.credential.create' | 'trusted_issuer.create' | 'trusted_issuer.update' | 'trusted_issuer.delete' | 'agent.create' | 'agent.delete' | 'agent.update' | 'skill.create' | 'skill.delete' | 'skill.enable' | 'skill.disable' | 'skill.update' | 'skill.share' | 'skill.unshare' | 'skill.load' | 'skill.force_load' | 'skill.version.create' | 'plugin.create' | 'plugin.update' | 'plugin.delete' | 'prompt.create' | 'prompt.delete' | 'prompt.update' | 'prompt.version.create' | 'knowledge_base.create' | 'knowledge_base.delete' | 'knowledge_base.update' | 'knowledge_base.version.create' | 'custom_voice.create' | 'custom_voice.update' | 'custom_voice.delete' | 'feature_permission.override.created' | 'feature_permission.override.deleted' | 'resource.share' | 'resource.unshare' | 'la_plateforme.training.enabled' | 'la_plateforme.training.disabled' | 'cloud_runtime.app.created' | 'cloud_runtime.app.updated' | 'cloud_runtime.app.deleted' | 'cloud_runtime.app.paused' | 'cloud_runtime.app.resumed' | 'cloud_runtime.deployment.created' | 'cloud_runtime.deployment.succeeded' | 'cloud_runtime.deployment.canceled' | 'cloud_runtime.deployment.stopped' | 'cloud_runtime.deployment.failed' | 'cloud_runtime.deployment.autoscaled' | 'cloud_runtime.domain.created' | 'cloud_runtime.domain.updated' | 'cloud_runtime.domain.deleted' | 'cloud_runtime.secret.created' | 'cloud_runtime.secret.updated' | 'cloud_runtime.secret.deleted' | 'cloud_runtime.service.created' | 'cloud_runtime.service.paused' | 'cloud_runtime.service.resumed' | 'cloud_runtime.service.deleted' | 'cloud_runtime.service.manually_scaled' | 'cloud_runtime.service.manual_scaling_deleted' | 'cloud_runtime.persistent_volume.created' | 'cloud_runtime.persistent_volume.deleted' | 'cloud_runtime.persistent_volume.attached' | 'cloud_runtime.persistent_volume.detached' | 'fine_tuning_job.create' | 'fine_tuning_job.cancel' | 'batch_job.create' | 'batch_job.cancel' | 'batch_job.delete' | 'data_capture.extract_job.create' | 'data_capture.extract_job.cancel' | 'dataset.create' | 'dataset.delete' | 'library.create' | 'library.delete' | 'library.update' | 'library.share' | 'library.unshare' | 'library.document.create' | 'library.document.delete' | 'library.document.bulk_delete' | 'library.document.update' | 'library.document.reprocess' | 'integration.connected' | 'integration.disconnected' | 'indexing.workflow.completed' | 'indexing.deleted' | 'connection.admin.setup_index' | 'connection.admin.deleted' | 'integration.activated_for_org' | 'integration.deactivated_for_org' | 'integration.activated_for_workspace' | 'integration.deactivated_for_workspace' | 'integration.activated_for_user' | 'integration.deactivated_for_user' | 'integration.created' | 'integration.updated' | 'integration.deleted' | 'integration.tool_called' | 'integration.tool_activated' | 'integration.tool_deactivated' | 'integration.credentials.created_or_updated' | 'integration.credentials.deleted' | 'integration.credentials.revoked' | 'integration.credentials.revocation_failed' | 'integration.preferences.created_or_updated' | 'integration.preferences.deleted' | 'integration.authentication_method.created_or_updated' | 'integration.connection.created' | 'integration.shared' | 'integration.unshared' | 'connectors_gateway.tool_called' | 'connectors_debugger.tool_called' | 'crawler.config.create' | 'crawler.config.update' | 'crawler.config.delete' | 'crawler.run.create' | 'crawler.run.cancel' | 'web_search.filter_config.update' | 'web_search.filter_domain.add' | 'web_search.filter_domain.remove' | 'web_filters.config.update' | 'web_filters.domain.add' | 'web_filters.domain.remove' | 'secrets_manager.secret.created' | 'secrets_manager.secret.updated' | 'secrets_manager.secret.revealed' | 'secrets_manager.secret.metadata_updated' | 'secrets_manager.secret.deleted' | 'secrets_manager.secret.version.deleted' | 'secrets_manager.secret.version.restored' | 'rate_limit.rule.create' | 'rate_limit.rule.update' | 'rate_limit.rule.delete' | 'workflow.execution.started' | 'workflow.execution.canceled' | 'workflow.execution.terminated' | 'workflow.execution.signal' | 'workflow.execution.query' | 'workflow.execution.update' | 'workflow.worker.registered' | 'workflow.schedule.created' | 'workflow.schedule.updated' | 'workflow.schedule.paused' | 'workflow.schedule.resumed' | 'workflow.schedule.deleted' | 'workflow.schedule.triggered' | 'workflow.archived' | 'workflow.unarchived' | 'workflow.deployment.authorized_credential.granted' | 'workflow.deployment.authorized_credential.revoked' required
event_metadataobject required

Details about the recorded action.

target_type'USER' | 'USER_GROUP' | 'ORGANIZATION' | 'WORKSPACE' | 'API_KEY' | 'ADMIN_API_KEY' | 'API_KEY_POLICY' | 'SERVICE_ACCOUNT' | 'AGENT' | 'SKILL' | 'PLUGIN' | 'PROMPT' | 'KNOWLEDGE_BASE' | 'CUSTOM_VOICE' | 'DATASET' | 'FINE_TUNING_JOB' | 'BATCH_JOB' | 'DATA_CAPTURE_EXTRACT_JOB' | 'LE_CHAT_CONVERSATION' | 'LE_CHAT_MEMORIES' | 'LE_CHAT_FLASH_ANSWERS' | 'LE_CHAT_LOCALISATION' | 'LE_CHAT_DATA' | 'INVOICE' | 'WALLET' | 'MONTHLY_LIMIT' | 'WORKSPACE_MONTHLY_LIMIT' | 'SHARED_BUDGET' | 'AUTO_RECHARGE' | 'PAYMENT_METHOD' | 'SUBSCRIPTION' | 'BILLING_INFO' | 'LIBRARY' | 'LIBRARY_DOCUMENT' | 'INTEGRATION' | 'CONNECTORS_GATEWAY' | 'CONNECTORS_DEBUGGER' | 'FEATURE_PERMISSION' | 'SECRET_STORE_ENTRY' | 'CRAWLER_CONFIG' | 'WEB_SEARCH_FILTER' | 'WEB_FILTERS' | 'SHARED_RESOURCE' | 'RATE_LIMIT_RULE' | 'APP' | 'DEPLOYMENT' | 'DOMAIN' | 'PERSISTENT_VOLUME' | 'SECRET' | 'SERVICE' | 'TRUSTED_ISSUER' | 'WORKFLOW' | 'SCHEDULE' required
target_metadataobject required

Details about the affected resource.

log_idinteger required

Audit log entry ID.

organization_uuidstring uuid nullable

Organization ID for the audit log entry.

workspace_uuidstring uuid nullable

Workspace ID for the audit log entry.

Changes

    • warning

      added the new ADMIN_API_KEY enum value to the / response property for the response status

    • warning

      added the new SCHEDULE enum value to the / response property for the response status

    • warning

      added the new SERVICE_ACCOUNT enum value to the / response property for the response status

    • warning

      added the new WEB_FILTERS enum value to the / response property for the response status

    • warning

      added the new WORKFLOW enum value to the / response property for the response status

    • warning

      added the new billing.credit_coupon.used enum value to the / response property for the response status

    • warning

      added the new billing.subscription_coupon.used enum value to the / response property for the response status

    • warning

      added the new integration.tool_activated enum value to the / response property for the response status

    • warning

      added the new integration.tool_deactivated enum value to the / response property for the response status

    • warning

      added the new organization.delete enum value to the / response property for the response status

    • warning

      added the new organization.scim.secret.rotate enum value to the / response property for the response status

    • warning

      added the new secrets_manager.secret.created enum value to the / response property for the response status

    • warning

      added the new secrets_manager.secret.deleted enum value to the / response property for the response status

    • warning

      added the new secrets_manager.secret.metadata_updated enum value to the / response property for the response status

    • warning

      added the new secrets_manager.secret.revealed enum value to the / response property for the response status

    • warning

      added the new secrets_manager.secret.updated enum value to the / response property for the response status

    • warning

      added the new secrets_manager.secret.version.deleted enum value to the / response property for the response status

    • warning

      added the new secrets_manager.secret.version.restored enum value to the / response property for the response status

    • warning

      added the new web_filters.config.update enum value to the / response property for the response status

    • warning

      added the new web_filters.domain.add enum value to the / response property for the response status

    • warning

      added the new web_filters.domain.remove enum value to the / response property for the response status

    • warning

      added the new workflow.archived enum value to the / response property for the response status

    • warning

      added the new workflow.deployment.authorized_credential.granted enum value to the / response property for the response status

    • warning

      added the new workflow.deployment.authorized_credential.revoked enum value to the / response property for the response status

    • warning

      added the new workflow.execution.canceled enum value to the / response property for the response status

    • warning

      added the new workflow.execution.query enum value to the / response property for the response status

    • warning

      added the new workflow.execution.signal enum value to the / response property for the response status

    • warning

      added the new workflow.execution.started enum value to the / response property for the response status

    • warning

      added the new workflow.execution.terminated enum value to the / response property for the response status

    • warning

      added the new workflow.execution.update enum value to the / response property for the response status

    • warning

      added the new workflow.schedule.created enum value to the / response property for the response status

    • warning

      added the new workflow.schedule.deleted enum value to the / response property for the response status

    • warning

      added the new workflow.schedule.paused enum value to the / response property for the response status

    • warning

      added the new workflow.schedule.resumed enum value to the / response property for the response status

    • warning

      added the new workflow.schedule.triggered enum value to the / response property for the response status

    • warning

      added the new workflow.schedule.updated enum value to the / response property for the response status

    • warning

      added the new workflow.unarchived enum value to the / response property for the response status

    • warning

      added the new workflow.worker.registered enum value to the / response property for the response status

    • info

      added the enum value ADMIN_API_KEY to the property anyOf[subschema #1]/items/ of the query request parameter actor_type

    • info

      added the enum value SCHEDULE to the property anyOf[subschema #1]/items/ of the query request parameter target_type

    • info

      added the enum value SERVICE_ACCOUNT to the property anyOf[subschema #1]/items/ of the query request parameter actor_type

    • info

      added the enum value WEB_FILTERS to the property anyOf[subschema #1]/items/ of the query request parameter target_type

    • info

      added the enum value WORKFLOW to the property anyOf[subschema #1]/items/ of the query request parameter target_type

    • info

      added the enum value billing.credit_coupon.used to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value billing.subscription_coupon.used to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value integration.tool_activated to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value integration.tool_deactivated to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value organization.delete to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value organization.scim.secret.rotate to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value secrets_manager.secret.created to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value secrets_manager.secret.deleted to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value secrets_manager.secret.metadata_updated to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value secrets_manager.secret.revealed to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value secrets_manager.secret.updated to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value secrets_manager.secret.version.deleted to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value secrets_manager.secret.version.restored to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value web_filters.config.update to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value web_filters.domain.add to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value web_filters.domain.remove to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.archived to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.deployment.authorized_credential.granted to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.deployment.authorized_credential.revoked to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.execution.canceled to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.execution.query to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.execution.signal to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.execution.started to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.execution.terminated to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.execution.update to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.schedule.created to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.schedule.deleted to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.schedule.paused to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.schedule.resumed to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.schedule.triggered to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.schedule.updated to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.unarchived to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value workflow.worker.registered to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • warning

      added the new PLUGIN enum value to the / response property for the response status

    • warning

      added the new WEB_SEARCH_FILTER enum value to the / response property for the response status

    • warning

      added the new le_chat.temporary_conversation.converted enum value to the / response property for the response status

    • warning

      added the new le_chat.temporary_conversation.created enum value to the / response property for the response status

    • warning

      added the new plugin.create enum value to the / response property for the response status

    • warning

      added the new plugin.delete enum value to the / response property for the response status

    • warning

      added the new plugin.update enum value to the / response property for the response status

    • warning

      added the new web_search.filter_config.update enum value to the / response property for the response status

    • warning

      added the new web_search.filter_domain.add enum value to the / response property for the response status

    • warning

      added the new web_search.filter_domain.remove enum value to the / response property for the response status

    • info

      added the enum value PLUGIN to the property anyOf[subschema #1]/items/ of the query request parameter target_type

    • info

      added the enum value WEB_SEARCH_FILTER to the property anyOf[subschema #1]/items/ of the query request parameter target_type

    • info

      added the enum value le_chat.temporary_conversation.converted to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value le_chat.temporary_conversation.created to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value plugin.create to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value plugin.delete to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value plugin.update to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value web_search.filter_config.update to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value web_search.filter_domain.add to the property anyOf[subschema #1]/items/ of the query request parameter event_type

    • info

      added the enum value web_search.filter_domain.remove to the property anyOf[subschema #1]/items/ of the query request parameter event_type