---
title: "Get all user audit log events for your organization in the time frame, limited to 500 records"
method: POST
path: "/api/v1/audit-log/user-events"
tags: ["client-api-audit-log-rest-resource"]
---

# Get all user audit log events for your organization in the time frame, limited to 500 records

`POST /api/v1/audit-log/user-events`

## Request

- Base URL: `https://app.visotrust.com`
- URL: `https://app.visotrust.com/api/v1/audit-log/user-events`
- Auth: none declared
- TypeScript: <https://skmtc.dev/visotrust/apis/viso-trust-api-documentation/docs/api/v1/audit-log/user-events/post.ts> (a function with typed inputs; its response is checked against the schema)

## Request body

- AuditLogFilterRequest: Request for filtering audit log events by specific types
  - `start` string, date-time, required: Start date for the audit log query
  - `end` string, date-time, required: End date for the audit log query
  - `eventTypes` string[]: Set of specific event types to retrieve. If null or empty, returns all event types. Allowed values (by category): USER_: USER_LOGGED_IN, USER_LOGGED_OUT, EXISTING_USER_FIRST_LOG_IN, NEW_USER_FIRST_LOG_IN, USER_UPLOADED_ARTIFACT, USER_DOWNLOADED_ARTIFACT, USER_EXPORTED_ARTIFACT, USER_CREATED, USER_UPDATED, USER_SUBSCRIBED, USER_UNSUBSCRIBED, USER_DEFAULT_SUBSCRIBER_ADDED, USER_DEFAULT_SUBSCRIBER_REMOVED ORG_: ORG_CREATED, ORG_UPDATED, ORG_FIRST_LOGIN, ORG_OFFBOARD_IN_PROGRESS, ORG_OFFBOARD_SUCCESS, ORG_OFFBOARD_FAILED, ORG_SUBDOMAIN_SET, ORG_ASSESSMENT_DEFAULTS_CREATED, ORG_ASSESSMENT_DEFAULTS_UPDATED ASSESSMENT_: ASSESSMENT_CREATED, ASSESSMENT_UPDATED, ASSESSMENT_COMPLETED, ASSESSMENT_CANCELLED, ASSESSMENT_CANCELLED_BY_VENDOR, ASSESSMENT_CANCELLED_BY_CLIENT, ASSESSMENT_CANCELLED_BY_AUDITOR, ASSESSMENT_CANCELLED_BY_ADMIN, ASSESSMENT_AUTOMATICALLY_CANCELLED, ASSESSMENT_EXPIRED, ASSESSMENT_AUDIT_COMPLETED, ASSESSMENT_STATUS_CHANGED RELATIONSHIP_: RELATIONSHIP_CREATED, RELATIONSHIP_ARCHIVED, RELATIONSHIP_ONBOARDED, RELATIONSHIP_UPDATED, RISK_ACCEPTED, RISK_ACCEPTANCE_REVOKED, PRIMARY_CONTACT_CHANGED

## Response `200`

OK

- UserAuditEvent[]
  - `auditEventType` 'USER_LOGGED_OUT' | 'USER_CREATED' | 'USER_UPDATED' | 'USER_FIRST_LOG_IN' | 'EXISTING_USER_FIRST_LOG_IN' | 'NEW_USER_FIRST_LOG_IN' | 'USER_LOGGED_IN' | 'USER_DEFAULT_SUBSCRIBER_ADDED' | 'USER_DEFAULT_SUBSCRIBER_REMOVED' | 'USER_SUBSCRIBED' | 'USER_UNSUBSCRIBED' | 'USER_UPLOADED_ARTIFACT' | 'USER_DOWNLOADED_ARTIFACT' | 'USER_EXPORTED_ARTIFACT'
  - `dateTime` string, date-time
  - `email` string
  - `userId` integer

---

[API](https://skmtc.dev/visotrust/apis/viso-trust-api-documentation.md) - [All operations](https://skmtc.dev/visotrust/apis/viso-trust-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/visotrust/apis/viso-trust-api-documentation/revisions/98c8d5d102c9?raw)