---
title: "List audit logs"
method: GET
path: "/v2/audit-logs"
tags: ["Audit Logs"]
---

# List audit logs

`GET /v2/audit-logs`

Retrieve a paginated list of authenticated user audit log entries for the
account. Results are ordered newest first.

**Access requirements:**
- The caller must be an account admin.
- The account must have audit logging enabled.

Returns `403` if either condition is not met.

<Note>This endpoint is in beta, read more [here](https://arize.com/docs/ax/rest-reference#api-version-stages).</Note>

## Query parameters

- `start_time` string, date-time
- `end_time` string, date-time
- `user_id` string — A universally unique identifier (base64-encoded opaque string).
- `operation_type` 'QUERY' | 'MUTATION' | 'SUBSCRIPTION' — The type of operation that was audited.
- `limit` integer
- `cursor` string

## Response `200`

A paginated list of audit log entries.

- ListAuditLogsResponse
  - `logs` AuditLog[], required — A list of audit log entries, newest first.
    - `id` string, required — A universally unique identifier (base64-encoded opaque string).
    - `user_id` string, required — A universally unique identifier (base64-encoded opaque string).
    - `ip` string, required — The IP address from which the request originated.
    - `operation_type` 'QUERY' | 'MUTATION' | 'SUBSCRIPTION', required — The type of operation that was audited.
    - `operation_name` string, nullable — The name of the GraphQL operation or REST endpoint.
    - `operation_text` string, nullable — The full text of the operation (query or mutation body, or REST request body).
    - `variables` string, nullable — JSON-serialized variables passed with the operation.
    - `created_at` string, date-time, required — ISO 8601 timestamp when the action was recorded.
  - `pagination` PaginationMetadata, required — Cursor-based pagination metadata. Use `next_cursor` in the subsequent request's `cursor` query parameter.
    - `next_cursor` string — Opaque cursor for fetching the next page. Treat as an unreadable token. Present when `has_more` is true; omitted when `has_more` is false.
    - `has_more` boolean, required — True if another page of results is available.

## Other responses

- `400` — Invalid request
- `401` — Authentication is required
- `403` — Insufficient permissions to access this resource
- `429` — Rate limit exceeded

---

[API](https://skmtc.net/arize-ai/apis/arize-rest-api.md) · [All operations](https://skmtc.net/arize-ai/apis/arize-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/arize-ai/arize-rest-api/versions/2ce448f1de13/schema)