---
title: "Get user action logs from store."
method: POST
path: "/user-action-logs"
tags: ["Logs"]
---

# Get user action logs from store.

`POST /user-action-logs`

## Request

- Base URL: `https://asm.cloud.tenable.com/api/1.0`
- URL: `https://asm.cloud.tenable.com/api/1.0/user-action-logs`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/tenable/apis/attack-surface-management/docs/user-action-logs/post.ts> (a function with typed inputs; its response is checked against the schema)

## Query parameters

- `actor_id` integer
- `offset` integer
- `limit` integer

## Request body

- FilterItem[]: Filters to be applied on assets, consists of FilterItem objects.
  - `column` string: The property to filter on. You can use the [List Asset Properties](ref:getavailablecolumns) endpoint to get a list of possible values.
  - `type` string: The type of filter to apply. Refer to [Robust Filtering](https://docs.tenable.com/attack-surface-management/Content/Topics/Inventory/AssetFilters.htm#Robust_Filtering) for a list of possible filter types.
  - `value` string: The value to filter on. For date-time values, please use the ISO format. For example: "2024-10-21T10:00:00.000Z".

## Response `200`

OK

- object
  - `list` object[]
    - `id` string, uuid
    - `action` string
    - `target` string
    - `actor` string
    - `actor_id` integer
    - `inventory_id` integer
    - `description_values` string
    - `created_at` string, date-time
  - `total` integer

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `500`: Internal server error

---

[API](https://skmtc.dev/tenable/apis/attack-surface-management.md) - [All operations](https://skmtc.dev/tenable/apis/attack-surface-management/llms.txt) - [OpenAPI document](https://skmtc.dev/tenable/apis/attack-surface-management/revisions/465c06285e48?raw)