v1
latestOpenAPI 3.0.12026-07-2376273191.5 KBAudit Logs
Retrieve audit logs
Note: To see the complete list of possible values, please reference the available filter options for audit logs under Settings in the app. API key must have the View audit logs permission.
get/api/v1/audit-logs
Query parameters
startTimestring date-time
endTimestring date-time
pageinteger required
Page number to return, 0-indexed. Default 0.
pageSizeinteger required
Number of results to return per page, between 1 and 1000. Default 250.
actionsstring[]
objectIdentifiersstring[]
objectTypes'ACCOUNT_FLAG' | 'ACTIVE_DIRECTORY_CONFIGURATION' | 'ALLOW_LIST_ENTRY' | 'API_KEY' | 'APIIRO_CONFIGURATION' | 'ARGOCD_CONFIGURATION' | 'ATLASSIAN_CONFIGURATION' | 'AWS_CLOUD_CONTROL_TYPE_CONFIGURATION' | 'AWS_CONFIGURATION' | 'AZURE_DEVOPS_CONFIGURATION' | 'AZURE_RESOURCES_CONFIGURATION' | 'BAMBOO_HR_CONFIGURATION' | 'BITBUCKET_CONFIGURATION' | 'BITBUCKET_OAUTH_CONFIGURATION' | 'BITBUCKET_OAUTH_REGISTRATION' | 'BITBUCKET_ONPREM_CONFIGURATION' | 'BITBUCKET_ONPREM_WEBHOOK_SECRET' | 'BITBUCKET_PERSONAL_CONFIGURATION' | 'BITBUCKET_WORKSPACE_ACCESS_TOKEN_CONFIGURATION' | 'BUGSNAG_CONFIGURATION' | 'BUILDKITE_CONFIGURATION' | 'CATALOG' | 'CATALOG_FILTER' | 'CHECKMARX_SAST_CONFIGURATION' | 'CIRCLE_CI_CONFIGURATION' | 'CLICKUP_CONFIGURATION' | 'CODECOV_CONFIGURATION' | 'CORALOGIX_CONFIGURATION' | 'CORTEX_TEAM_ROLES' | 'CORTEX_USER' | 'CORTEX_USER_ROLES' | 'CUSTOM_DATA' | 'CUSTOM_EVENT' | 'CUSTOM_METRICS_CONFIGURATION' | 'CUSTOM_METRICS_DATA' | 'CUSTOM_ROLE' | 'CUSTOM_ROLE_PERMISSIONS' | 'DATADOG_CONFIGURATION' | 'DEPENDENCY' | 'DOMAIN' | 'DYNATRACE_CONFIGURATION' | 'ENGINTEL_SAVED_MODULE' | 'ENTITY_SIDEBAR_CONFIGURATION' | 'ENTITY_TYPE_DEFINITION' | 'ENTITY_VERIFICATION' | 'FIREHYDRANT_CONFIGURATION' | 'GITHUB_APP_CONFIGURATION' | 'GITHUB_APP_INSTALLATION' | 'GITHUB_PERSONAL_TOKEN' | 'GITHUB_WEBHOOK_SECRET' | 'GITLAB_CONFIGURATION' | 'GOOGLE_CONFIGURATION' | 'IDENTITY_MAPPING' | 'INCIDENT_IO_CONFIGURATION' | 'INITIATIVE' | 'INSTANA_CONFIGURATION' | 'INTEGRATION_INSTANCE' | 'JENKINS_CONFIGURATION' | 'JIRA_BASIC_CONFIGURATION' | 'JIRA_CLOUD_SCOPED_CONFIGURATION' | 'JIRA_CONFIGURATION' | 'JIRA_OAUTH_CONFIGURATION' | 'JIRA_OAUTH_REGISTRATION' | 'JIRA_ONPREM_CONFIGURATION' | 'LAUNCHDARKLY_CONFIGURATION' | 'LIGHTSTEP_CONFIGURATION' | 'MEND_SAST_CONFIGURATION' | 'MEND_SCA_CONFIGURATION' | 'MICROSOFT_TEAMS_CONFIGURATION' | 'NEWRELIC_CONFIGURATION' | 'OAUTH_CONFIGURATION' | 'OKTA_CONFIGURATION' | 'OPENAPI_DEFINITION' | 'OPSGENIE_CONFIGURATION' | 'PAGERDUTY_CONFIGURATION' | 'PERSONAL_API_KEY' | 'PLUGIN' | 'PROMETHEUS_CONFIGURATION' | 'RELATIONSHIP_TYPE' | 'RELAY_CONFIGURATION' | 'RESOURCE' | 'ROLLBAR_CONFIGURATION' | 'SCORECARD' | 'SCORECARD_FILTER' | 'SCORECARD_RULE' | 'SCORECARD_RULE_FILTER' | 'SECRET' | 'SECRET_GROUP' | 'SEMGREP_CONFIGURATION' | 'SENTRY_CONFIGURATION' | 'SERVICE' | 'SERVICENOW_CONFIGURATION' | 'SIGNALFX_CONFIGURATION' | 'SLACK_CONFIGURATION' | 'SNYK_CONFIGURATION' | 'SONARQUBE_CONFIGURATION' | 'SUMOLOGIC_CONFIGURATION' | 'TEAM' | 'USER_LABEL_KEY' | 'VERACODE_CONFIGURATION' | 'VERIFICATION_PERIOD' | 'VICTOROPS_CONFIGURATION' | 'WEBHOOK_CONFIGURATION' | 'WIZ_CONFIGURATION' | 'WORKDAY_CONFIGURATION' | 'WORKFLOW' | 'XMATTERS_CONFIGURATION'
Filter by Cortex object types (CATALOG, SERVICE, TEAM, SCORECARD, etc), integration configurations (AWS_CONFIGURATION, BITBUCKET_CONFIGURATION, etc), and more.
actorTypesstring[]
actorApiKeyIdentifiersstring[]
actorEmailsstring[]
actorIpAddressesstring[]
actorRequestTypes'API_KEY_ENTITY' | 'ATLASSIAN_WEBHOOK' | 'SCORECARD_BADGES' | 'SLACK_COMMAND'
Response
Successfully retrieved audit logs