Skip to content
Authrim

List audit log entries.

GET
/api/admin/audit-logs
Code sample: Shell / cURL 
curl --request GET \
  --url https://auth.example.com/api/admin/audit-logs \
  --header 'Authorization: Bearer <token>'

List Audit Logs in the Admin Miscellaneous area. Use this operation to retrieve audit log data without mutating tenant state. Retained whole-row archives are included in supported log queries. A bounded query that cannot read its required rows returns log_query_incomplete instead of partial statistics or an empty success.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Header Parameters

Section titled “Header Parameters ”
X-Tenant-Id
string

Tenant selector for multi-tenant admin requests.

Query Parameters

Section titled “Query Parameters ”
page
integer
>= 1
limit
integer
>= 1 <= 500
cursor
string
<= 4096 characters

Cursor returned by a previous response for this tenant and these filters. Start with page 1; log lists use cursors instead of page numbers.

Responses

Section titled “ Responses ”

200

Section titled “200 ”

Audit events from the current authorized Iceberg view and scheduled staging.

Media type application/json
object
coverage
object
consistency
required
string
Allowed values: snapshot eventual local_hot_only
pending_deliveries
required

Null for self-service subjects that cannot inspect tenant delivery counts.

integer | null
complete
required

Pipeline and local staging-only views remain false even when no pending deliveries are known.

boolean
key
additional properties
entries
required
Array<object>
object
id
required
string
action
required
string
createdAt
required
string format: date-time
key
additional properties
pagination
required
One of:

Cursor pagination over retained log rows. Totals and page numbers are not returned. Reuse the cursor with the same tenant, endpoint, and filters.

object
mode
required
string
Allowed value: cursor
limit
required
integer
>= 1 <= 200
has_more
required
boolean
next_cursor
required
string | null
<= 4096 characters
key
additional properties
key
additional properties
Example 
{
  "coverage": {
    "consistency": "snapshot"
  },
  "pagination": {
    "mode": "cursor"
  }
}

Headers

Section titled “Headers ”
X-Authrim-Log-Consistency
string
Allowed values: snapshot eventual local_hot_only

Snapshot for the remote scheduled view; eventual when Pipeline visibility can lag ingestion; local_hot_only for local scheduled staging without a remote Catalog.

X-Authrim-Log-Pending-Deliveries
integer

Tenant deliveries not yet confirmed visible. Omitted for self-service subjects. Zero does not guarantee immediate Pipeline visibility.

X-Authrim-Log-Complete
boolean

True only for a complete bounded snapshot query. Pipeline responses remain false; incomplete reads return 503.

400

Section titled “400 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

503

Section titled “503 ”

The retained log query is incomplete. No partial entries or statistics are returned as a successful result. Narrow the period or retry.

Media type application/json
object
error
required
string
Allowed value: log_query_incomplete
error_description
required
string
complete
required
boolean
key
additional properties
Example 
{
  "error": "log_query_incomplete",
  "complete": false
}