---
title: "Fetch a list of Audit logs"
method: GET
path: "/audit_logs"
---

# Fetch a list of Audit logs

`GET /audit_logs`

## Query parameters

- `cursor` string
- `per_page` integer
- `search` string

## Response `200`

A paged array of Audit logs

- object
  - `page` integer — current page of data, as specified by the 'page' request parameter. This page number is 0-indexed.
  - `last_page` integer — the final page number for the dataset. This is zero-indexed, so that a dataset with a record count less than or equal to the page size will be 0.
  - `data` AuditLog[] — Details about the Audit logs
    - `id` string — The canonical identifier for this audit log
    - `timestamp` string, date-time — The timestamp the event occured
    - `actor_name` string — The name of the entity triggering the event
    - `description` string — Description of the event that occured

## Other responses

- `403` — An 'unauthorized' response may occur for features restricted by or unavailable to your organization

---

[API](https://skmtc.net/kolide/apis/k2-api.md) · [All operations](https://skmtc.net/kolide/apis/k2-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/kolide/k2-api/versions/7013d788398e/schema)