---
title: "Search Audit Events"
method: POST
path: "/api/v1/settings/email-provider/audit-events"
tags: ["Tenant Email Provider"]
---

# Search Audit Events

`POST /api/v1/settings/email-provider/audit-events`

SearchAuditEvents returns email audit events for the tenant.

## Request body

- C1ApiSettingsV1SearchEmailAuditEventsRequest — The SearchEmailAuditEventsRequest message.
  - `pageSize` integer — Maximum results per page (0 = server default, max 100).
  - `pageToken` string — Pagination token from previous response.

## Response `200`

Successful response

- C1ApiSettingsV1SearchEmailAuditEventsResponse — The SearchEmailAuditEventsResponse message.
  - `list` object[], nullable — OCSF EmailActivity events as Struct for frontend rendering.
  - `nextPageToken` string — Token for next page. Empty when no more pages.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)