---
title: "Changes to List audit logs"
method: GET
path: "/api/v2/audit"
---

# Changes to List audit logs

`GET /api/v2/audit`

> Every recorded change to this endpoint, newest first.

## Timeline

Changed in 4 of 66 revisions.

- **2026-04-01** `40bf219eced6` — 9 breaking, 1 info
- **2026-04-01** `6aaeba6ecdc5` — 1 breaking, 9 info
- **2026-04-01** `674e0a229e8a` — 9 breaking, 1 info
- **2026-01-12** `a426ff0abf8f` — 1 breaking, 9 info

## Changes

- **2026-04-01** `40bf219eced6` — 9 breaking, 1 info
  - added the pattern `^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$` to the `query` request parameter `created_at`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `action`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `actor_email`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `actor_id`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `actor_name`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `id`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `request_id`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `source`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `status`
  - for the `query` request parameter `created_at`, the type/format was generalized from `string`/`date-time` to `string`/``
- **2026-04-01** `6aaeba6ecdc5` — 1 breaking, 9 info
  - for the `query` request parameter `created_at`, the type/format was changed from `string`/`` to `string`/`date-time`
  - removed the pattern `^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$` from the `query` request parameter `created_at`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `action`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `actor_email`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `actor_id`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `actor_name`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `id`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `request_id`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `source`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `status`
- **2026-04-01** `674e0a229e8a` — 9 breaking, 1 info
  - added the pattern `^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$` to the `query` request parameter `created_at`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `action`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `actor_email`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `actor_id`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `actor_name`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `id`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `request_id`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `source`
  - added the pattern `^((eq|~eq|neq):)?[^:]+$` to the `query` request parameter `status`
  - for the `query` request parameter `created_at`, the type/format was generalized from `string`/`date-time` to `string`/``
- **2026-01-12** `a426ff0abf8f` — 1 breaking, 9 info
  - for the `query` request parameter `created_at`, the type/format was changed from `string`/`` to `string`/`date-time`
  - removed the pattern `^((eq|neq|gt|gte|lt|lte):)?[0-9]{4}-[0-9]{2}-[0-9]{2}[Tt][0-9]{2}:[0-9]{2}:[0-9]{2}(\.[0-9]{1,9})?([Zz]|-[0-9]{2}:[0-9]{2})$` from the `query` request parameter `created_at`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `action`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `actor_email`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `actor_id`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `actor_name`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `id`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `request_id`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `source`
  - removed the pattern `^((eq|~eq|neq):)?[^:]+$` from the `query` request parameter `status`

---

[Operation](https://skmtc.dev/specterops/apis/bloodhound-api/docs/api/v2/audit/get.md) · [API](https://skmtc.dev/specterops/apis/bloodhound-api.md) · [Page](https://skmtc.dev/specterops/apis/bloodhound-api/changes/api/v2/audit/get)