Events

List audit events

Changed on

List audit events for the org, newest first. Each event carries the authentication method (auth) and, when resolvable, the principal who acted. Time window defaults to the last 24h; event types default to all.

get/orgs/{orgName}/events

Request

  • Base URL
    https://api.signadot.com/api/v2
  • Auth
    API key in header signadot-api-key

Path parameters

orgNamestring required

Signadot Org Name

Query parameters

startTimestring

Window start (RFC3339); defaults to endTime-24h

endTimestring

Window end (RFC3339); defaults to now

typestring[]

Event type filter; repeatable; defaults to all

filtersstring

event_data filter DSL (key=value&...)

limitinteger

Max events (1..1000); defaults to 200

cursorstring

Opaque pagination cursor: pass the previous page's last event cursor to fetch the next (older) page. Keep the other query parameters (type/filters/principal/authMethod and the time window) stable across pages; the window is pinned to the cursor, and changing the other filters mid-pagination restarts the result set.

principalKindstring

Filter by principal kind (User|ServiceAccount|System). System selects events with no principal. Matches events that recorded a principal; older events are attributed best-effort in the response but are not matched by this filter.

principalIdstring

Filter by principal public ID (requires principalKind). Matches events that recorded this principal; older events attributed to it best-effort are not matched.

authMethodstring

Filter by authentication method (jwt|api_key|system); covers all events.

Response

OK

Changes