---
title: "List Audit Entries"
method: GET
path: "/audit/v3/entries"
tags: ["Audit"]
---

# List Audit Entries

`GET /audit/v3/entries`

Returns audit log entries for the tenant, sorted by time with the most recent first. Results can be filtered by time range, actor, role, action, and resource type, or searched by free text.

## Query parameters

- `start_time` string, date-time
- `end_time` string, date-time
- `role` string
- `action` string
- `resource_type` string
- `actor_type` 'USER' | 'API_KEY'
- `search` string
- `limit` integer
- `offset` integer

## Response `200`

Successful response

- object
  - `items` AuditEntry[], required — List of items. If no matching items are found, then `[]` will be returned.
    - `occurred_at` string, date-time, required
    - `action` string, required — Action performed by the actor
    - `resource_type` string, required — Type of HiddenLayer resource that was acted upon
    - `resource_id` string, required — Unique identifier for the resource that was acted upon
    - `api_permissions_required` string[], required — Snapshot of API permissions required to perform the action
    - `metadata` object — Contextual information specific to the audited event
    - `description` string — Description of the action performed
    - `actor_type` 'USER' | 'API_KEY', required
    - `actor_id` string, uuid, required — Unique identifier for the actor
    - `actor_name` string — Name of the actor
    - `actor_email` string — Email address of the actor
    - `assigned_roles` string[], required — Snapshot of the roles assigned to the actor at the time of the action
    - `correlation_id` string — Correlation ID associated with the action
    - `session_id` string — Session ID
  - `limit` integer, required — Maximum number of items to return
  - `offset` integer, required — Begin returning the results from this offset

## Other responses

- `400` — The request failed due to a client error, with one or more of the following possible causes: 1. The request required a tenant_id field, which was missing. 2. The request was malformed syntactically or semantically.
- `422` — Validation Error

---

[API](https://skmtc.net/hiddenlayerai/apis/hiddenlayer-audit-api.md) · [All operations](https://skmtc.net/hiddenlayerai/apis/hiddenlayer-audit-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/hiddenlayerai/hiddenlayer-audit-api/revisions/efca861e915b/schema)