---
title: "Get audit logs"
method: POST
path: "/v1/auditlogs"
tags: ["audit"]
---

# Get audit logs

`POST /v1/auditlogs`

Retrieve audit logs based on specified filters. Returns a paginated list of audit log entries.

<Note>This API operation is available for Enterprise-tier organizations with single-tenant environments. To use it you must have audit log access permissions. Contact Instabase Support to request access to audit logs for your organization.</Note>

<Note>This API operation is not supported by the SDK but you can access it from Python by making direct REST calls, as shown in the sample code.</Note>

## Headers

- `Authorization` string, required

## Request body

- object
  - `start` integer, nullable — Number of results to skip for pagination
  - `size` integer, nullable — Maximum number of results to return
  - `log_type` string, nullable — Type of audit log to filter by. Valid values include: - `account_v2`: User account creation logs - `api_v2`: API request logs - `app_deployment_run_v2`: Deployment run operation logs - `app_deployment_v2`: Deployment operation logs - `app_v2`: Automation app operation logs - `datasource_v2`: Data connection operation logs - `login_v2`: User login and authentication logs - `oauth2_v2`: OAuth token operation logs - `org_v2`: Organization role change logs - `org_secrets_v2`: Organization secrets operation logs - `perms_v2`: Membership and role change logs, for the organization, workspaces, and groups - `projects_v2`: Automation project operation logs - `review_v2`: Human review operation logs - `workspace_v2`: Workspace management operation logs For details about tracked operations, see [Viewing audit logs](/admin/audit-logs/).
  - `email` string, nullable — Filter logs by user email
  - `start_time` string, nullable — Start time in epoch milliseconds
  - `end_time` string, nullable — End time in epoch milliseconds

## Response `200`

Successfully retrieved audit logs

- AuditGetAuditLogsResponse200
  - `status` string
  - `data` V1AuditlogsPostResponsesContentApplicationJsonSchemaData
    - `results` V1AuditlogsPostResponsesContentApplicationJsonSchemaDataResultsItems[]
      - `timestamp_millis` string — Timestamp in epoch milliseconds
      - `email` string — User email associated with the log entry
      - `user_ip` string — IP address of the user
      - `log_type` string — Type of the audit log

---

[API](https://skmtc.net/instabase/apis/api-reference.md) · [All operations](https://skmtc.net/instabase/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/instabase/api-reference/revisions/3a4f46d48141/schema)