---
title: "Get audit logs belonging to the specified organization. User must be part of the organization."
method: GET
path: "/organizations/{organization_id}/audit-logs"
tags: ["Audit Logs"]
---

# Get audit logs belonging to the specified organization. User must be part of the organization.

`GET /organizations/{organization_id}/audit-logs`

## Path parameters

- `organization_id` string, required

## Query parameters

- `project_ids` string[]
- `start_time` string
- `end_time` string
- `actions` string[]
- `actor_ids` string[]
- `actor_emails` string[]
- `actor_types` string[]
- `target_ids` string[]
- `target_types` string[]
- `target_names` string[]
- `locations` string[]
- `results` string[]
- `results_not` string[]
- `surfaces` string[]
- `limit` string
- `next_token` string
- `prev_token` string

## Response `200`

- AuditLogsGetResponse
  - `items` LogEntry[], required
    - `action` string, required — Name of the action
    - `action_detail` string — Name of the action
    - `actor_email` string, required — ActorEmail: the email address of the actor
    - `actor_id` string, required — Actor: who performed the action.
    - `actor_type` string, required — ActorType: type of the actor
    - `client_ip` string, required — IP address of the request
    - `end_time` string, required — The end time of the request
    - `error_message` string — The error message of the request
    - `locations` string[] — Region names of where the action is performed if applicable
    - `organization_id` string — organization id
    - `organization_name` string — organization name
    - `project_id` string — Project ID
    - `project_name` string — Project Name
    - `result` string, required — The result of the action
    - `start_time` string, required — The start time of the request
    - `surface` string, required — Surface type of the request
    - `target_ids` string[] — The targets of the action required
    - `target_names` string[] — The target names of the action
    - `target_type` string — The target type of the action required
  - `next_page_token` string — Base64 encoded token representing the starting of the next page of log entry. Empty if currently on the last page.
  - `prev_page_token` string — Base64 encoded token representing the starting previous page of log entry. Empty if currently on the first page.

## Other responses

- `400` — Error Bad Request
- `401` — Error Authentication Failed
- `403` — Error Permissions
- `500` — Error Internal Server

---

[API](https://skmtc.net/crusoecloud/apis/crusoe-cloud-api-gateway.md) · [All operations](https://skmtc.net/crusoecloud/apis/crusoe-cloud-api-gateway/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/crusoecloud/crusoe-cloud-api-gateway/revisions/a3fd2dedc72b/schema)