Get access trace timeline.
curl --request GET \ --url 'https://auth.example.com/api/admin/access-trace/timeline?period=1h&granularity=minute' \ --header 'Authorization: Bearer <token>'Returns bucketed allow/deny counts for charting access decisions over time. Retained whole-row archives are included in supported log queries. A bounded query that cannot read its required rows returns log_query_incomplete instead of partial statistics or an empty success.
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Query Parameters
Section titled “Query Parameters ”Timeline period.
Requested granularity. For 24h, minute produces one-minute buckets; other periods use handler-selected bucket sizes.
Responses
Section titled “ Responses ”Access trace timeline response.
object
Bucket size in seconds.
object
Example generated
{ "period": "example", "granularity": 1, "data": [ { "timestamp": 1, "total": 1, "allowed": 1, "denied": 1 } ]}Headers
Section titled “Headers ”Snapshot for the remote scheduled view; eventual when Pipeline visibility can lag ingestion; local_hot_only for local scheduled staging without a remote Catalog.
Tenant deliveries not yet confirmed visible. Omitted for self-service subjects. Zero does not guarantee immediate Pipeline visibility.
True only for a complete bounded snapshot query. Pipeline responses remain false; incomplete reads return 503.
Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}The retained log query is incomplete. No partial entries or statistics are returned as a successful result. Narrow the period or retry.
object
Example
{ "error": "log_query_incomplete", "complete": false}