--- title: "List Investigation Activity" method: GET path: "/incidents/v1/investigations/{investigation_id}/log" tags: ["Investigations"] --- # List Investigation Activity `GET /incidents/v1/investigations/{investigation_id}/log` ## Path parameters - `investigation_id` string, required ## Query parameters - `sequence_id` string - `page_size` integer, required - `page_token` string ## Response `200` A successful response. - S12IncidentsV1ListInvestigationLogResponse - `result` S12IncidentsV1InvestigationLogEvent[] — The log events - `at` string, date-time — timestamp for the log event - `investigation_id` string — unique identifier for the investigation event - `performed_by` S12IncidentsV1UserMeta - `user_id` string — unique identifier for the user - `display_name` string — name of the user - `profile_image` S12CommonMedia - `id` string - `token` string - `filename` string — full file name, including file extension - `media_type` 'MEDIA_TYPE_IMAGE' | 'MEDIA_TYPE_VIDEO' | 'MEDIA_TYPE_PDF' | 'MEDIA_TYPE_DOCX' | 'MEDIA_TYPE_XLSX' | 'MEDIA_TYPE_PPTX' | 'MEDIA_TYPE_CSV' — - MEDIA_TYPE_IMAGE: An image file (GIF, JPG, PNG, WEBP). - MEDIA_TYPE_VIDEO: A video file (MP4, MOV). - MEDIA_TYPE_PDF: A PDF document. - MEDIA_TYPE_DOCX: A Microsoft Word document (DOCX, DOC). - MEDIA_TYPE_XLSX: A Microsoft Excel spreadsheet (XLSX, XLS). - MEDIA_TYPE_PPTX: A Microsoft PowerPoint presentation (PPTX, PPT). - MEDIA_TYPE_CSV: A CSV file. - `email` string — email address of the user - `seat_type` 'SUBSCRIPTION_SEAT_TYPE_UNSPECIFIED' | 'SUBSCRIPTION_SEAT_TYPE_PREMIUM' | 'SUBSCRIPTION_SEAT_TYPE_COLLABORATOR' | 'SUBSCRIPTION_SEAT_TYPE_LITE' | 'SUBSCRIPTION_SEAT_TYPE_SERVICE_USER' | 'SUBSCRIPTION_SEAT_TYPE_SUPPORT' - `status` 'USER_ACTIVE_STATUS_UNSPECIFIED' | 'USER_ACTIVE_STATUS_ACTIVE' | 'USER_ACTIVE_STATUS_DEACTIVATED' — - USER_ACTIVE_STATUS_UNSPECIFIED: Status is unknown or not specified - USER_ACTIVE_STATUS_ACTIVE: User is active - USER_ACTIVE_STATUS_DEACTIVATED: User has been deactivated - `timezone` string — the timezone of the user - `details` S12IncidentsV1InvestigationLogEventDetails - `created` S12IncidentsV1InvestigationCreatedDetails - `owner_changed` S12IncidentsV1InvestigationOwnerChangedDetails - `from` S12IncidentsV1UserMeta - `user_id` string — unique identifier for the user - `display_name` string — name of the user - `profile_image` S12CommonMedia - `id` string - `token` string - `filename` string — full file name, including file extension - `media_type` 'MEDIA_TYPE_IMAGE' | 'MEDIA_TYPE_VIDEO' | 'MEDIA_TYPE_PDF' | 'MEDIA_TYPE_DOCX' | 'MEDIA_TYPE_XLSX' | 'MEDIA_TYPE_PPTX' | 'MEDIA_TYPE_CSV' — - MEDIA_TYPE_IMAGE: An image file (GIF, JPG, PNG, WEBP). - MEDIA_TYPE_VIDEO: A video file (MP4, MOV). - MEDIA_TYPE_PDF: A PDF document. - MEDIA_TYPE_DOCX: A Microsoft Word document (DOCX, DOC). - MEDIA_TYPE_XLSX: A Microsoft Excel spreadsheet (XLSX, XLS). - MEDIA_TYPE_PPTX: A Microsoft PowerPoint presentation (PPTX, PPT). - MEDIA_TYPE_CSV: A CSV file. - `email` string — email address of the user - `seat_type` 'SUBSCRIPTION_SEAT_TYPE_UNSPECIFIED' | 'SUBSCRIPTION_SEAT_TYPE_PREMIUM' | 'SUBSCRIPTION_SEAT_TYPE_COLLABORATOR' | 'SUBSCRIPTION_SEAT_TYPE_LITE' | 'SUBSCRIPTION_SEAT_TYPE_SERVICE_USER' | 'SUBSCRIPTION_SEAT_TYPE_SUPPORT' - `status` 'USER_ACTIVE_STATUS_UNSPECIFIED' | 'USER_ACTIVE_STATUS_ACTIVE' | 'USER_ACTIVE_STATUS_DEACTIVATED' — - USER_ACTIVE_STATUS_UNSPECIFIED: Status is unknown or not specified - USER_ACTIVE_STATUS_ACTIVE: User is active - USER_ACTIVE_STATUS_DEACTIVATED: User has been deactivated - `timezone` string — the timezone of the user - `to` S12IncidentsV1UserMeta - `user_id` string — unique identifier for the user - `display_name` string — name of the user - `profile_image` S12CommonMedia - `id` string - `token` string - `filename` string — full file name, including file extension - `media_type` 'MEDIA_TYPE_IMAGE' | 'MEDIA_TYPE_VIDEO' | 'MEDIA_TYPE_PDF' | 'MEDIA_TYPE_DOCX' | 'MEDIA_TYPE_XLSX' | 'MEDIA_TYPE_PPTX' | 'MEDIA_TYPE_CSV' — - MEDIA_TYPE_IMAGE: An image file (GIF, JPG, PNG, WEBP). - MEDIA_TYPE_VIDEO: A video file (MP4, MOV). - MEDIA_TYPE_PDF: A PDF document. - MEDIA_TYPE_DOCX: A Microsoft Word document (DOCX, DOC). - MEDIA_TYPE_XLSX: A Microsoft Excel spreadsheet (XLSX, XLS). - MEDIA_TYPE_PPTX: A Microsoft PowerPoint presentation (PPTX, PPT). - MEDIA_TYPE_CSV: A CSV file. - `email` string — email address of the user - `seat_type` 'SUBSCRIPTION_SEAT_TYPE_UNSPECIFIED' | 'SUBSCRIPTION_SEAT_TYPE_PREMIUM' | 'SUBSCRIPTION_SEAT_TYPE_COLLABORATOR' | 'SUBSCRIPTION_SEAT_TYPE_LITE' | 'SUBSCRIPTION_SEAT_TYPE_SERVICE_USER' | 'SUBSCRIPTION_SEAT_TYPE_SUPPORT' - `status` 'USER_ACTIVE_STATUS_UNSPECIFIED' | 'USER_ACTIVE_STATUS_ACTIVE' | 'USER_ACTIVE_STATUS_DEACTIVATED' — - USER_ACTIVE_STATUS_UNSPECIFIED: Status is unknown or not specified - USER_ACTIVE_STATUS_ACTIVE: User is active - USER_ACTIVE_STATUS_DEACTIVATED: User has been deactivated - `timezone` string — the timezone of the user - `title_changed` S12IncidentsV1InvestigationTitleChangedDetails - `from` string — the previous title - `to` string — the new title - `description_changed` S12IncidentsV1InvestigationDescriptionChangedDetails - `from` string — the previous description - `to` string — the new description - `status_changed` S12IncidentsV1InvestigationStatusChangedDetails - `from` S12IncidentsV1StatusMeta - `status_id` string — unique identifier for the status - `title` string — Deprecated. Use title_localised instead. title of the status - `badge_color` 'StatusBadgeColorAccent' | 'StatusBadgeColorInfo' | 'StatusBadgeColorNegative' | 'StatusBadgeColorPositive' | 'StatusBadgeColorWarning' | 'StatusBadgeColorSurface' — - StatusBadgeColorAccent: Color is accent - StatusBadgeColorInfo: Color is info - StatusBadgeColorNegative: Color is negative - StatusBadgeColorPositive: Color is positive - StatusBadgeColorWarning: Color is warning - StatusBadgeColorSurface: Color is surface - `title_localised` S12IncidentsV1LocalisedString - `value` string — The string value that has been matched - `lang` string — The matched language which has been used to provided the value - `alternatives` S12IncidentsV1LocalisedStringSet - … - `to` S12IncidentsV1StatusMeta - `status_id` string — unique identifier for the status - `title` string — Deprecated. Use title_localised instead. title of the status - `badge_color` 'StatusBadgeColorAccent' | 'StatusBadgeColorInfo' | 'StatusBadgeColorNegative' | 'StatusBadgeColorPositive' | 'StatusBadgeColorWarning' | 'StatusBadgeColorSurface' — - StatusBadgeColorAccent: Color is accent - StatusBadgeColorInfo: Color is info - StatusBadgeColorNegative: Color is negative - StatusBadgeColorPositive: Color is positive - StatusBadgeColorWarning: Color is warning - StatusBadgeColorSurface: Color is surface - `title_localised` S12IncidentsV1LocalisedString - `value` string — The string value that has been matched - `lang` string — The matched language which has been used to provided the value - `alternatives` S12IncidentsV1LocalisedStringSet - … - `action_linked` S12IncidentsV1InvestigationActionLinkedDetails - `action` S12IncidentsV1InvestigationAction - `linked_at` string, date-time — The time that the action was linked at - `action` S12TasksV1Action - `task` S12TasksV1Task - … - `custom_field_and_values` S12TasksV1TaskCustomFieldAndValue[] — Custom fields and their values (if any) belonging to the action - … - `type` S12TasksV1Type — The type associated with an action. - … - `is_access_denied` boolean — Flag to indicate that the requester does not have access to the linked action - `is_deleted` boolean — Flag to indicate that the linked action has been deleted - `originates_from` S12IncidentsV1LinkOriginatesFrom - `linked_at` string, date-time — The time that the originating link was linked_at - `action` S12IncidentsV1InvestigationAction — recursive - `issue` S12IncidentsV1InvestigationIssue - … - `inspection` S12IncidentsV1InvestigationInspection - … - `media` S12IncidentsV1InvestigationMedia - … - `action_unlinked` S12IncidentsV1InvestigationActionUnlinkedDetails - `action` S12IncidentsV1InvestigationAction - `linked_at` string, date-time — The time that the action was linked at - `action` S12TasksV1Action - `task` S12TasksV1Task - … - `custom_field_and_values` S12TasksV1TaskCustomFieldAndValue[] — Custom fields and their values (if any) belonging to the action - … - `type` S12TasksV1Type — The type associated with an action. - … - `is_access_denied` boolean — Flag to indicate that the requester does not have access to the linked action - `is_deleted` boolean — Flag to indicate that the linked action has been deleted - `originates_from` S12IncidentsV1LinkOriginatesFrom - `linked_at` string, date-time — The time that the originating link was linked_at - `action` S12IncidentsV1InvestigationAction — recursive - `issue` S12IncidentsV1InvestigationIssue - … - `inspection` S12IncidentsV1InvestigationInspection - … - `media` S12IncidentsV1InvestigationMedia - … - `issue_linked` S12IncidentsV1InvestigationIssueLinkedDetails - `issue` S12IncidentsV1InvestigationIssue - `linked_at` string, date-time — The time that the issue was linked at - `issue` S12TasksV1Incident — An Incident represents the details of an issue. This can include the category, any attached media, the location, any linked inspections and the task associated with the issue. - `task` S12TasksV1Task - … - `category_id` string — @deprecated. Use category instead. The category id associated with the issue. - `category` S12TasksV1Category — A category is used to classify an issue. For example, you can filter issues by category for analytics, or give users or groups access to issues from a category. - … - `media` S12CommonMedia[] — Any media associated with this issue. - … - `location` S12TasksV1TaskAddressLocation — The location of the task. The latitude and longitude in the `geo_position` object are required. All other fields are optional, but add extra context to the location on platform. - … - `inspections` S12TasksV1Inspection[] — The inspections that are linked to this issue. - … - `items` S12TasksV1Item[] — A snapshot of the category items, at the time of creation. - … - `question_answers` S12TasksV1QuestionAnswers[] — The answers to the snapshot category items - … - `ai_generated` boolean — True when this issue was created via an AI-assisted flow. Set from the client at submit time and persisted on the issue. Top-level marker for EU AI Act Article 50(2) machine-readable detectability (AI-522). - `is_access_denied` boolean — Flag to indicate that the requester does not have access to the linked issue - `is_deleted` boolean — Flag to indicate that the linked issue has been deleted - `originates_from` S12IncidentsV1LinkOriginatesFrom - `linked_at` string, date-time — The time that the originating link was linked_at - `action` S12IncidentsV1InvestigationAction - … - `issue` S12IncidentsV1InvestigationIssue — recursive - `inspection` S12IncidentsV1InvestigationInspection - … - `media` S12IncidentsV1InvestigationMedia - … - `issue_unlinked` S12IncidentsV1InvestigationIssueUnlinkedDetails - `issue` S12IncidentsV1InvestigationIssue - `linked_at` string, date-time — The time that the issue was linked at - `issue` S12TasksV1Incident — An Incident represents the details of an issue. This can include the category, any attached media, the location, any linked inspections and the task associated with the issue. - `task` S12TasksV1Task - … - `category_id` string — @deprecated. Use category instead. The category id associated with the issue. - `category` S12TasksV1Category — A category is used to classify an issue. For example, you can filter issues by category for analytics, or give users or groups access to issues from a category. - … - `media` S12CommonMedia[] — Any media associated with this issue. - … - `location` S12TasksV1TaskAddressLocation — The location of the task. The latitude and longitude in the `geo_position` object are required. All other fields are optional, but add extra context to the location on platform. - … - `inspections` S12TasksV1Inspection[] — The inspections that are linked to this issue. - … - `items` S12TasksV1Item[] — A snapshot of the category items, at the time of creation. - … - `question_answers` S12TasksV1QuestionAnswers[] — The answers to the snapshot category items - … - `ai_generated` boolean — True when this issue was created via an AI-assisted flow. Set from the client at submit time and persisted on the issue. Top-level marker for EU AI Act Article 50(2) machine-readable detectability (AI-522). - `is_access_denied` boolean — Flag to indicate that the requester does not have access to the linked issue - `is_deleted` boolean — Flag to indicate that the linked issue has been deleted - `originates_from` S12IncidentsV1LinkOriginatesFrom - `linked_at` string, date-time — The time that the originating link was linked_at - `action` S12IncidentsV1InvestigationAction - … - `issue` S12IncidentsV1InvestigationIssue — recursive - `inspection` S12IncidentsV1InvestigationInspection - … - `media` S12IncidentsV1InvestigationMedia - … - `inspection_linked` S12IncidentsV1InvestigationInspectionLinkedDetails - `inspection` S12IncidentsV1InvestigationInspection - `linked_at` string, date-time — The time that the inspection was linked at - `inspection` S12InspectionsV1GetInspectionsResponseInspectionsListItem - `id` string — inspections id - `name` string — title of the inspection - `completed` boolean — if the inspection is completed or not - `archived` boolean — if inspection is archived or not - `score_percentage` number, double — score percentage - `score` number, double — score of the inspection - `total_score` number, double — total score of the inspection - `duration` string, int64 — total duration of the inspection - `document_number` string — document number of the inspection - `date_started` string, date-time — date the inspection started - `date_modified` string, date-time — date the inspection was last modified - `date_completed` string, date-time — date the inspection was completed. can be a zero date for incomplete inspections - `date_conducted` string, date-time — date the inspection was conducted - `revision_key` string — revision key of the inspection - `metadata_image` S12CommonMedia - … - `template` S12InspectionsV1GetInspectionsResponseInspectionsListItemTemplate - … - `location` S12InspectionsV1GetInspectionsResponseInspectionsListItemLocation - … - `author` S12InspectionsV1GetInspectionsResponseInspectionsListItemAuthor - … - `owner` S12InspectionsV1GetInspectionsResponseInspectionsListItemOwner - … - `access_level` 'ACCESS_LEVEL_UNKNOWN' | 'ACCESS_LEVEL_VIEW' | 'ACCESS_LEVEL_EDIT' | 'ACCESS_LEVEL_DELETE' - `inspection_approval_state` 'INSPECTION_APPROVAL_STATE_UNSPECIFIED' | 'INSPECTION_APPROVAL_STATE_NOT_REQUESTED' | 'INSPECTION_APPROVAL_STATE_REQUESTED' | 'INSPECTION_APPROVAL_STATE_APPROVED' — - INSPECTION_APPROVAL_STATE_UNSPECIFIED: Inspection has no approval pages - INSPECTION_APPROVAL_STATE_NOT_REQUESTED: Inspection has at least one approval page, and approval hasn't been requested yet - INSPECTION_APPROVAL_STATE_REQUESTED: Approval has been requested for one of the pages - inspection is awaiting approval - INSPECTION_APPROVAL_STATE_APPROVED: All approval pages in the inspection has been approved - `date_approved` string, date-time — date the inspection was last approved - `last_approver` S12InspectionsV1GetInspectionsResponseInspectionsListItemApprover - … - `is_access_denied` boolean — Flag to indicate that the requester does not have access to the linked inspection - `is_deleted` boolean — Flag to indicate that the linked inspection has been deleted - `originates_from` S12IncidentsV1LinkOriginatesFrom - `linked_at` string, date-time — The time that the originating link was linked_at - `action` S12IncidentsV1InvestigationAction - … - `issue` S12IncidentsV1InvestigationIssue - … - `inspection` S12IncidentsV1InvestigationInspection — recursive - `media` S12IncidentsV1InvestigationMedia - … - `inspection_unlinked` S12IncidentsV1InvestigationInspectionUnlinkedDetails - `inspection` S12IncidentsV1InvestigationInspection - `linked_at` string, date-time — The time that the inspection was linked at - `inspection` S12InspectionsV1GetInspectionsResponseInspectionsListItem - `id` string — inspections id - `name` string — title of the inspection - `completed` boolean — if the inspection is completed or not - `archived` boolean — if inspection is archived or not - `score_percentage` number, double — score percentage - `score` number, double — score of the inspection - `total_score` number, double — total score of the inspection - `duration` string, int64 — total duration of the inspection - `document_number` string — document number of the inspection - `date_started` string, date-time — date the inspection started - `date_modified` string, date-time — date the inspection was last modified - `date_completed` string, date-time — date the inspection was completed. can be a zero date for incomplete inspections - `date_conducted` string, date-time — date the inspection was conducted - `revision_key` string — revision key of the inspection - `metadata_image` S12CommonMedia - … - `template` S12InspectionsV1GetInspectionsResponseInspectionsListItemTemplate - … - `location` S12InspectionsV1GetInspectionsResponseInspectionsListItemLocation - … - `author` S12InspectionsV1GetInspectionsResponseInspectionsListItemAuthor - … - `owner` S12InspectionsV1GetInspectionsResponseInspectionsListItemOwner - … - `access_level` 'ACCESS_LEVEL_UNKNOWN' | 'ACCESS_LEVEL_VIEW' | 'ACCESS_LEVEL_EDIT' | 'ACCESS_LEVEL_DELETE' - `inspection_approval_state` 'INSPECTION_APPROVAL_STATE_UNSPECIFIED' | 'INSPECTION_APPROVAL_STATE_NOT_REQUESTED' | 'INSPECTION_APPROVAL_STATE_REQUESTED' | 'INSPECTION_APPROVAL_STATE_APPROVED' — - INSPECTION_APPROVAL_STATE_UNSPECIFIED: Inspection has no approval pages - INSPECTION_APPROVAL_STATE_NOT_REQUESTED: Inspection has at least one approval page, and approval hasn't been requested yet - INSPECTION_APPROVAL_STATE_REQUESTED: Approval has been requested for one of the pages - inspection is awaiting approval - INSPECTION_APPROVAL_STATE_APPROVED: All approval pages in the inspection has been approved - `date_approved` string, date-time — date the inspection was last approved - `last_approver` S12InspectionsV1GetInspectionsResponseInspectionsListItemApprover - … - `is_access_denied` boolean — Flag to indicate that the requester does not have access to the linked inspection - `is_deleted` boolean — Flag to indicate that the linked inspection has been deleted - `originates_from` S12IncidentsV1LinkOriginatesFrom - `linked_at` string, date-time — The time that the originating link was linked_at - `action` S12IncidentsV1InvestigationAction - … - `issue` S12IncidentsV1InvestigationIssue - … - `inspection` S12IncidentsV1InvestigationInspection — recursive - `media` S12IncidentsV1InvestigationMedia - … - `media_added` S12IncidentsV1InvestigationMediaAddedDetails - `media` S12IncidentsV1InvestigationMedia - `uploaded_by` S12IncidentsV1UserMeta - `user_id` string — unique identifier for the user - `display_name` string — name of the user - `profile_image` S12CommonMedia - … - `email` string — email address of the user - `seat_type` 'SUBSCRIPTION_SEAT_TYPE_UNSPECIFIED' | 'SUBSCRIPTION_SEAT_TYPE_PREMIUM' | 'SUBSCRIPTION_SEAT_TYPE_COLLABORATOR' | 'SUBSCRIPTION_SEAT_TYPE_LITE' | 'SUBSCRIPTION_SEAT_TYPE_SERVICE_USER' | 'SUBSCRIPTION_SEAT_TYPE_SUPPORT' - `status` 'USER_ACTIVE_STATUS_UNSPECIFIED' | 'USER_ACTIVE_STATUS_ACTIVE' | 'USER_ACTIVE_STATUS_DEACTIVATED' — - USER_ACTIVE_STATUS_UNSPECIFIED: Status is unknown or not specified - USER_ACTIVE_STATUS_ACTIVE: User is active - USER_ACTIVE_STATUS_DEACTIVATED: User has been deactivated - `timezone` string — the timezone of the user - `uploaded_at` string, date-time — The time that the media was uploaded - `originates_from` S12IncidentsV1LinkOriginatesFrom - `linked_at` string, date-time — The time that the originating link was linked_at - `action` S12IncidentsV1InvestigationAction - … - `issue` S12IncidentsV1InvestigationIssue - … - `inspection` S12IncidentsV1InvestigationInspection - … - `media` S12IncidentsV1InvestigationMedia — recursive - `file` S12CommonMedia - `id` string - `token` string - `filename` string — full file name, including file extension - `media_type` 'MEDIA_TYPE_IMAGE' | 'MEDIA_TYPE_VIDEO' | 'MEDIA_TYPE_PDF' | 'MEDIA_TYPE_DOCX' | 'MEDIA_TYPE_XLSX' | 'MEDIA_TYPE_PPTX' | 'MEDIA_TYPE_CSV' — - MEDIA_TYPE_IMAGE: An image file (GIF, JPG, PNG, WEBP). - MEDIA_TYPE_VIDEO: A video file (MP4, MOV). - MEDIA_TYPE_PDF: A PDF document. - MEDIA_TYPE_DOCX: A Microsoft Word document (DOCX, DOC). - MEDIA_TYPE_XLSX: A Microsoft Excel spreadsheet (XLSX, XLS). - MEDIA_TYPE_PPTX: A Microsoft PowerPoint presentation (PPTX, PPT). - MEDIA_TYPE_CSV: A CSV file. - `is_access_denied` boolean — Flag to indicate that the requester does not have access to the linked media - `media_removed` S12IncidentsV1InvestigationMediaRemovedDetails - `media` S12IncidentsV1InvestigationMedia - `uploaded_by` S12IncidentsV1UserMeta - `user_id` string — unique identifier for the user - `display_name` string — name of the user - `profile_image` S12CommonMedia - … - `email` string — email address of the user - `seat_type` 'SUBSCRIPTION_SEAT_TYPE_UNSPECIFIED' | 'SUBSCRIPTION_SEAT_TYPE_PREMIUM' | 'SUBSCRIPTION_SEAT_TYPE_COLLABORATOR' | 'SUBSCRIPTION_SEAT_TYPE_LITE' | 'SUBSCRIPTION_SEAT_TYPE_SERVICE_USER' | 'SUBSCRIPTION_SEAT_TYPE_SUPPORT' - `status` 'USER_ACTIVE_STATUS_UNSPECIFIED' | 'USER_ACTIVE_STATUS_ACTIVE' | 'USER_ACTIVE_STATUS_DEACTIVATED' — - USER_ACTIVE_STATUS_UNSPECIFIED: Status is unknown or not specified - USER_ACTIVE_STATUS_ACTIVE: User is active - USER_ACTIVE_STATUS_DEACTIVATED: User has been deactivated - `timezone` string — the timezone of the user - `uploaded_at` string, date-time — The time that the media was uploaded - `originates_from` S12IncidentsV1LinkOriginatesFrom - `linked_at` string, date-time — The time that the originating link was linked_at - `action` S12IncidentsV1InvestigationAction - … - `issue` S12IncidentsV1InvestigationIssue - … - `inspection` S12IncidentsV1InvestigationInspection - … - `media` S12IncidentsV1InvestigationMedia — recursive - `file` S12CommonMedia - `id` string - `token` string - `filename` string — full file name, including file extension - `media_type` 'MEDIA_TYPE_IMAGE' | 'MEDIA_TYPE_VIDEO' | 'MEDIA_TYPE_PDF' | 'MEDIA_TYPE_DOCX' | 'MEDIA_TYPE_XLSX' | 'MEDIA_TYPE_PPTX' | 'MEDIA_TYPE_CSV' — - MEDIA_TYPE_IMAGE: An image file (GIF, JPG, PNG, WEBP). - MEDIA_TYPE_VIDEO: A video file (MP4, MOV). - MEDIA_TYPE_PDF: A PDF document. - MEDIA_TYPE_DOCX: A Microsoft Word document (DOCX, DOC). - MEDIA_TYPE_XLSX: A Microsoft Excel spreadsheet (XLSX, XLS). - MEDIA_TYPE_PPTX: A Microsoft PowerPoint presentation (PPTX, PPT). - MEDIA_TYPE_CSV: A CSV file. - `is_access_denied` boolean — Flag to indicate that the requester does not have access to the linked media - `access_set` S12IncidentsV1InvestigationAccessSetDetails - `user` S12IncidentsV1UserMeta - `user_id` string — unique identifier for the user - `display_name` string — name of the user - `profile_image` S12CommonMedia - `id` string - `token` string - `filename` string — full file name, including file extension - `media_type` 'MEDIA_TYPE_IMAGE' | 'MEDIA_TYPE_VIDEO' | 'MEDIA_TYPE_PDF' | 'MEDIA_TYPE_DOCX' | 'MEDIA_TYPE_XLSX' | 'MEDIA_TYPE_PPTX' | 'MEDIA_TYPE_CSV' — - MEDIA_TYPE_IMAGE: An image file (GIF, JPG, PNG, WEBP). - MEDIA_TYPE_VIDEO: A video file (MP4, MOV). - MEDIA_TYPE_PDF: A PDF document. - MEDIA_TYPE_DOCX: A Microsoft Word document (DOCX, DOC). - MEDIA_TYPE_XLSX: A Microsoft Excel spreadsheet (XLSX, XLS). - MEDIA_TYPE_PPTX: A Microsoft PowerPoint presentation (PPTX, PPT). - MEDIA_TYPE_CSV: A CSV file. - `email` string — email address of the user - `seat_type` 'SUBSCRIPTION_SEAT_TYPE_UNSPECIFIED' | 'SUBSCRIPTION_SEAT_TYPE_PREMIUM' | 'SUBSCRIPTION_SEAT_TYPE_COLLABORATOR' | 'SUBSCRIPTION_SEAT_TYPE_LITE' | 'SUBSCRIPTION_SEAT_TYPE_SERVICE_USER' | 'SUBSCRIPTION_SEAT_TYPE_SUPPORT' - `status` 'USER_ACTIVE_STATUS_UNSPECIFIED' | 'USER_ACTIVE_STATUS_ACTIVE' | 'USER_ACTIVE_STATUS_DEACTIVATED' — - USER_ACTIVE_STATUS_UNSPECIFIED: Status is unknown or not specified - USER_ACTIVE_STATUS_ACTIVE: User is active - USER_ACTIVE_STATUS_DEACTIVATED: User has been deactivated - `timezone` string — the timezone of the user - `from_level` 'AccessLevelNone' | 'AccessLevelView' | 'AccessLevelEdit' | 'AccessLevelOwner' — - AccessLevelNone: Access level is 'none' - AccessLevelView: Access level is 'view' - AccessLevelEdit: Access level is 'edit' - AccessLevelOwner: Access level is 'owner' - `to_level` 'AccessLevelNone' | 'AccessLevelView' | 'AccessLevelEdit' | 'AccessLevelOwner' — - AccessLevelNone: Access level is 'none' - AccessLevelView: Access level is 'view' - AccessLevelEdit: Access level is 'edit' - AccessLevelOwner: Access level is 'owner' - `field_changed` S12IncidentsV1InvestigationFieldChangedDetails - `title` string — the title of the field which has been changed - `from` string — the previous content of the field - `to` string — the new content of the field - `field_deleted` S12IncidentsV1InvestigationFieldDeletedDetails - `title` string — the title of the field which has been deleted - `detail_field_changed` S12IncidentsV1InvestigationDetailFieldChangedDetails - `field_id` string - `title` string - `field_type` string — Type of the detail field being changed "single_select", "multi_select", etc. - `from_display_values` string[] — Human-readable previous value(s) single_select will have at most one value in the list - `to_display_values` string[] — Human-readable new value(s) single_select will have at most one value in the list - `correlation_id` string — a unique identifier for use in correlating events that occurred as part of one operation - `next_page_token` string — a token which can be used to fetch further results ## Other responses - `default` — An unexpected error response. --- [API](https://skmtc.net/safetyculture/apis/safetyculture-api.md) · [All operations](https://skmtc.net/safetyculture/apis/safetyculture-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/safetyculture/safetyculture-api/revisions/5be91df61ded/schema)