Skip to content

Get Audit Log

GET
/api/system/audit/log

Query the security audit log with optional filters.

event_type
Any of:
AuditEventType

Categories of security-auditable events.

string
Allowed values: document_access lore_query file_import file_export skill_change credential_change agent_delegation path_blocked

Filter by event type

actor
Any of:
string

Filter by actor (user, agent name)

project_id
Any of:
string

Filter by project

since
Any of:
string

ISO timestamp — events after this time

limit
Limit

Max events to return

integer
default: 100 >= 1 <= 500

Max events to return

Successful Response

AuditLogResponse

Paginated audit log response.

object
total
required
Total

Number of events returned

integer
events
required
Events

Audit events (newest first)

Array<object>
AuditLogItem

A single audit log entry.

object
id
required
Id

Event ID

string
timestamp
required
Timestamp

ISO timestamp (UTC)

string
eventType
required
Eventtype

Event category

string
actor
required
Actor

Who performed the action

string
resource
Any of:
string
action
required
Action

What was done

string
detail
Detail

Additional context (JSON)

projectId
Any of:
string

Validation Error

HTTPValidationError
object
detail
Detail
Array<object>
ValidationError
object
loc
required
Location
Array
msg
required
Message
string
type
required
Error Type
string
input
Input
ctx
Context
object