---
title: "Get Audit Log"
method: GET
path: "/v1/organizations/audit/logs/{audit_id}"
tags: ["Organization Audit"]
---

# Get Audit Log

`GET /v1/organizations/audit/logs/{audit_id}`

## Request

- Base URL: `https://api.mixpeek.com`
- URL: `https://api.mixpeek.com/v1/organizations/audit/logs/{audit_id}`
- Auth: HTTP bearer

Get a specific audit log entry by ID.

Requires ADMIN permission.

## Path parameters

- `audit_id` string, required

## Response `200`

Successful Response

- AuditEventResponse: Single audit event in list response.
  - `audit_id` string, required: Unique audit event identifier
  - `timestamp` unknown, required
  - `resource_type` string, required: Type of resource affected
  - `resource_id` string, required: ID of the affected resource
  - `action` string, required: Action performed
  - `actor_id` string, required: Who performed the action
  - `actor_type` string: Type of actor
  - `status` string: Status of the action
  - `changes` unknown
  - `reason` string, nullable: Caller-supplied reason for the change (the WHY), captured from the X-Change-Reason request header when present.
  - `ip_address` string, nullable: Request IP address
  - `user_agent` string, nullable: Request user agent
  - `actor_name` string, nullable: Resolved actor display name
  - `actor_email` string, nullable: Resolved actor email
  - `actor_key_name` string, nullable: API key name used

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `422`: Unprocessable Entity
- `429`: Too Many Requests
- `500`: Internal Server Error
- `503`: Service Unavailable

## Changes

- **2026-10-09** `61a175e8eb9a`: 1 warning, 5 info
  - removed the optional property `detail` from the response with the `422` status
  - added the non-success response with the status `429`
  - added the non-success response with the status `503`
  - added the optional property `success` to the response with the `422` status
  - …2 more
- **2026-08-24** `b40f559d564a`: 1 info
  - added the optional property `anyOf[subschema #1: AuditEventResponse]/reason` to the response with the `200` status
- **2026-08-09** `5d4c905106b4`: 1 info
  - the endpoint scheme security `BearerAuth` was added to the API

[Operation history](https://skmtc.dev/mixpeek/apis/mixpeek-api/changes/v1/organizations/audit/logs/:audit_id/get.md)

---

[API](https://skmtc.dev/mixpeek/apis/mixpeek-api.md) - [All operations](https://skmtc.dev/mixpeek/apis/mixpeek-api/llms.txt) - [OpenAPI document](https://skmtc.dev/mixpeek/apis/mixpeek-api/revisions/790bc16455f6?raw)