audit-log

Get Audit Log Events

Changed on

Paginated list of audit log events.

This endpoint consumes 1 unit of your quota.

This endpoint requires the following org token scopes:

  • audit-log:list
get/orgs/{org_slug}/audit-log

Request

  • Base URL
    https://api.socket.dev/v0
  • URL
    https://api.socket.dev/v0/orgs/{org_slug}/audit-log
  • Auth
    • HTTP bearer
    • or HTTP basic

Path parameters

org_slugstring required

The slug of the organization

Query parameters

type'AdminConfigureOauthClientAuthentication' | 'AddLicenseOverlayNote' | 'AdminAlertTypeUpdated' | 'AdminBotSkipIpsUpdated' | 'AdminCreateServiceAccountOAuthClient' | 'AdminDeleteServiceAccountOAuthClient' | 'AdminLinkGithubInstall' | 'AdminManagedReachabilityEnrolmentCreated' | 'AdminManagedReachabilityEnrolmentDeleted' | 'AdminManagedReachabilityEnrolmentUpdated' | 'AdminManagedReachabilityRunCanceled' | 'AdminManagedReachabilityRunRequested' | 'AdminManagedReachabilitySettingsUpdated' | 'AdminResetOrganizationSetting' | 'AdminSyncGithubInstall' | 'AdminTriggerFullScan' | 'AdminTriggerSocketPatchAutopatch' | 'AdminUnlinkGithubInstall' | 'AdminUpdateGithubInstallWorkspace' | 'AdminUpdateGithubInstallationSettings' | 'AdminUpdateOrganizationSetting' | 'AssociateLabel' | 'AuthorizeOauthCimdClient' | 'CancelInvitation' | 'ChangeMemberRole' | 'ChangePlanSubscriptionSeats' | 'CreateApiToken' | 'CreateArtifact' | 'CreateAccessPolicyAttachment' | 'CreateServiceAccount' | 'UpdateServiceAccount' | 'DisableServiceAccount' | 'RevokeServiceAccount' | 'AssignServiceAccountRoles' | 'CreateAccessPolicy' | 'CreateAlertPolicy' | 'CreateAlertPolicyRule' | 'CreateFirewallCustomRegistry' | 'CreateFirewallDeploymentConfig' | 'CreateLabel' | 'CreateOauthClientCredentialsToken' | 'CreateOauthRefreshToken' | 'CreateRepoAccessRule' | 'CreateUserWithPassword' | 'CreateWebhook' | 'CreateTicket' | 'CreateTicketingConfiguration' | 'CoanaCliLegacyModeCutoffUpdated' | 'CoanaCliLegacyModeDemoteOrg' | 'CoanaCliLegacyModePromoteOrg' | 'CreateAlertResolution' | 'DeleteAccessPolicy' | 'DeleteAlertPolicy' | 'DeleteAlertPolicyRule' | 'DeleteAlertNote' | 'DeleteAlertResolution' | 'DeleteAlertTriage' | 'DeleteAccessPolicyAttachment' | 'DeleteApiToken' | 'DeleteFirewallCustomRegistry' | 'DeleteFirewallDeploymentConfig' | 'DeleteFullScan' | 'DeleteLabel' | 'DeleteLabelSetting' | 'DeleteRepoAccessRule' | 'DeleteReport' | 'DeleteRepository' | 'DeleteTicketingConfiguration' | 'DeleteWebhook' | 'DisableAccessPolicyAttachment' | 'DisableAccessPolicy' | 'DisablePythonCliRunStreamingOverride' | 'DisassociateLabel' | 'DisconnectAsanaIntegration' | 'DisconnectClickupIntegration' | 'DisconnectJiraIntegration' | 'DisconnectLinearIntegration' | 'DowngradeOrganizationPlan' | 'EnablePythonCliRunStreamingOverride' | 'EnqueueAutopatchMergeRun' | 'EnqueueAutopatchPrepareJob' | 'FinalizeAlertPolicyMigration' | 'OptOutRulesAndPolicies' | 'RestoreRulesAndPolicies' | 'SetRulesAndPoliciesNewOrgCutoff' | 'JoinOrganization' | 'AsanaIntegrationConnected' | 'ClickupIntegrationConnected' | 'JiraIntegrationConnected' | 'InvalidateOauthCimdClientGrants' | 'LinearIntegrationConnected' | 'ManagedReachabilityRepositoriesAdded' | 'ManagedReachabilityRepositoryRemoved' | 'ManagedReachabilityRepositoryUpdated' | 'ManagedReachabilitySettingsUpdated' | 'NpmStagingTokenSaved' | 'NpmStagingTokenRemoved' | 'MemberAdded' | 'MemberRemoved' | 'MemberRoleChanged' | 'OpenFixPullRequest' | 'RemoveLicenseOverlay' | 'RemoveMember' | 'ReorderAlertPolicyRules' | 'RollbackAlertPolicyMigration' | 'ResetInvitationLink' | 'ResetOrganizationSettingToDefault' | 'ResolveOauthCimdClientMetadata' | 'RevokeOauthToken' | 'RotateOauthRefreshToken' | 'RevokeApiToken' | 'RotateApiToken' | 'SendInvitation' | 'SessionRevokedByUser' | 'SetLabelSettingToDefault' | 'SetSsoBypassMemberships' | 'SetSsoBypassRbacRoles' | 'SlackBroadcastToolBroadcast' | 'SlackBroadcastToolOptOut' | 'StartAlertPolicyMigrationPreview' | 'SSOEmailVerificationCompleted' | 'SSOLoginCompleted' | 'SvdBackfillLegacyOverlay' | 'SvdBackfillPatchAlertKeys' | 'SvdGhsaUpload' | 'SvdImportLegacyGithubMatches' | 'SvdImportLegacyOnlyGhsas' | 'SvdImportLegacyOverlay' | 'SvdReprocessClusters' | 'SvdRetransformGhsaMirror' | 'SvdSeedLegacyGithubMatches' | 'SvdTruncateRederive' | 'SvdUpdateGithubRepoAdvisorySource' | 'SvdWorkerPause' | 'SyncOrganization' | 'TransferOwnership' | 'ScimGroupRoleMapped' | 'ScimMemberRoleAssigned' | 'UpdateAlertPolicy' | 'UpdateAlertPolicyRule' | 'UpdateAlertNote' | 'UpdateAccessPolicyAttachment' | 'UpdateAccessPolicy' | 'UpdateAlertTriage' | 'UpdateApiTokenCommitter' | 'UpdateApiTokenMaxQuota' | 'UpdateApiTokenName' | 'UpdateApiTokenScopes' | 'UpdateApiTokenVisibility' | 'UpdateAutopatchCurated' | 'UpdateAutopatchPrepareConfig' | 'UpdateFirewallCustomRegistry' | 'UpdateFirewallDeploymentConfig' | 'UpdateLabel' | 'UpdateLabelSetting' | 'UpdateLicenseOverlay' | 'UpdateOrganizationSetting' | 'UpdateRepoAccessRule' | 'UpdateTicketingConfiguration' | 'UpdateWebhook' | 'UpgradeOrganizationPlan' | 'UserMagicLinkSent' | 'UserSignedIn' | 'UserSignedOut' | 'PurgeOrganizationData'

Filter audit log events by type. Omit for all types.

per_pageinteger

Number of events per page

pagestring

Page token

fromstring

A Unix timestamp in seconds to filter results prior to this date.

Response

The paginated list of events in an organizations audit log and the next page querystring token.

nextPagestring nullable required

Changes

    • info

      added the new enum value AdminAlertTypeUpdated to the query request parameter type

    • info

      added the new enum value AdminBotSkipIpsUpdated to the query request parameter type

    • info

      added the new enum value AdminConfigureOauthClientAuthentication to the query request parameter type

    • info

      added the new enum value AdminCreateServiceAccountOAuthClient to the query request parameter type

    • info

      added the new enum value AdminDeleteServiceAccountOAuthClient to the query request parameter type

    • info

      added the new enum value AdminLinkGithubInstall to the query request parameter type

    • info

      added the new enum value AdminManagedReachabilityEnrolmentCreated to the query request parameter type

    • info

      added the new enum value AdminManagedReachabilityEnrolmentDeleted to the query request parameter type

    • info

      added the new enum value AdminManagedReachabilityEnrolmentUpdated to the query request parameter type

    • info

      added the new enum value AdminManagedReachabilityRunCanceled to the query request parameter type

    • info

      added the new enum value AdminManagedReachabilityRunRequested to the query request parameter type

    • info

      added the new enum value AdminManagedReachabilitySettingsUpdated to the query request parameter type

    • info

      added the new enum value AdminResetOrganizationSetting to the query request parameter type

    • info

      added the new enum value AdminSyncGithubInstall to the query request parameter type

    • info

      added the new enum value AdminTriggerFullScan to the query request parameter type

    • info

      added the new enum value AdminTriggerSocketPatchAutopatch to the query request parameter type

    • info

      added the new enum value AdminUnlinkGithubInstall to the query request parameter type

    • info

      added the new enum value AdminUpdateGithubInstallWorkspace to the query request parameter type

    • info

      added the new enum value AdminUpdateGithubInstallationSettings to the query request parameter type

    • info

      added the new enum value AdminUpdateOrganizationSetting to the query request parameter type

    • info

      added the new enum value AssignServiceAccountRoles to the query request parameter type

    • info

      added the new enum value AuthorizeOauthCimdClient to the query request parameter type

    • info

      added the new enum value ClickupIntegrationConnected to the query request parameter type

    • info

      added the new enum value CreateAccessPolicy to the query request parameter type

    • info

      added the new enum value CreateAccessPolicyAttachment to the query request parameter type

    • info

      added the new enum value CreateAlertPolicyRule to the query request parameter type

    • info

      added the new enum value CreateOauthClientCredentialsToken to the query request parameter type

    • info

      added the new enum value CreateServiceAccount to the query request parameter type

    • info

      added the new enum value DeleteAccessPolicy to the query request parameter type

    • info

      added the new enum value DeleteAccessPolicyAttachment to the query request parameter type

    • info

      added the new enum value DeleteAlertNote to the query request parameter type

    • info

      added the new enum value DeleteAlertPolicyRule to the query request parameter type

    • info

      added the new enum value DisableAccessPolicy to the query request parameter type

    • info

      added the new enum value DisableAccessPolicyAttachment to the query request parameter type

    • info

      added the new enum value DisableServiceAccount to the query request parameter type

    • info

      added the new enum value DisconnectClickupIntegration to the query request parameter type

    • info

      added the new enum value InvalidateOauthCimdClientGrants to the query request parameter type

    • info

      added the new enum value ManagedReachabilityRepositoriesAdded to the query request parameter type

    • info

      added the new enum value ManagedReachabilityRepositoryRemoved to the query request parameter type

    • info

      added the new enum value ManagedReachabilityRepositoryUpdated to the query request parameter type

    • info

      added the new enum value ManagedReachabilitySettingsUpdated to the query request parameter type

    • info

      added the new enum value NpmStagingTokenRemoved to the query request parameter type

    • info

      added the new enum value NpmStagingTokenSaved to the query request parameter type

    • info

      added the new enum value OpenFixPullRequest to the query request parameter type

    • info

      added the new enum value OptOutRulesAndPolicies to the query request parameter type

    • info

      added the new enum value PurgeOrganizationData to the query request parameter type

    • info

      added the new enum value ReorderAlertPolicyRules to the query request parameter type

    • info

      added the new enum value ResolveOauthCimdClientMetadata to the query request parameter type

    • info

      added the new enum value RestoreRulesAndPolicies to the query request parameter type

    • info

      added the new enum value RevokeServiceAccount to the query request parameter type

    • info

      added the new enum value ScimGroupRoleMapped to the query request parameter type

    • info

      added the new enum value ScimMemberRoleAssigned to the query request parameter type

    • info

      added the new enum value SetRulesAndPoliciesNewOrgCutoff to the query request parameter type

    • info

      added the new enum value SlackBroadcastToolBroadcast to the query request parameter type

    • info

      added the new enum value SlackBroadcastToolOptOut to the query request parameter type

    • info

      added the new enum value SvdBackfillPatchAlertKeys to the query request parameter type

    • info

      added the new enum value SvdGhsaUpload to the query request parameter type

    • info

      added the new enum value SvdImportLegacyGithubMatches to the query request parameter type

    • info

      added the new enum value SvdImportLegacyOnlyGhsas to the query request parameter type

    • info

      added the new enum value SvdImportLegacyOverlay to the query request parameter type

    • info

      added the new enum value SvdRetransformGhsaMirror to the query request parameter type

    • info

      added the new enum value SvdSeedLegacyGithubMatches to the query request parameter type

    • info

      added the new enum value SvdTruncateRederive to the query request parameter type

    • info

      added the new enum value SvdUpdateGithubRepoAdvisorySource to the query request parameter type

    • info

      added the new enum value SvdWorkerPause to the query request parameter type

    • info

      added the new enum value UpdateAccessPolicy to the query request parameter type

    • info

      added the new enum value UpdateAccessPolicyAttachment to the query request parameter type

    • info

      added the new enum value UpdateAlertNote to the query request parameter type

    • info

      added the new enum value UpdateAlertPolicy to the query request parameter type

    • info

      added the new enum value UpdateAlertPolicyRule to the query request parameter type

    • info

      added the new enum value UpdateServiceAccount to the query request parameter type