List an organization's audit log
Returns the append-only audit trail for the given organization, newest first. Each entry records who changed what and when. The trail is read-only: entries are written automatically whenever audited resources change and cannot be created, edited, or deleted through the API. Paginated at 30 entries per page (max 50) and filterable by entity type and id, acting user, action, zone, IP address, and by partial match on the entity label or user display name.
Authorizations
Long-lived API token created via POST /api/api-tokens (returned once in plaintext).
JWT access token obtained via POST /api/auth/login. Send as: Authorization: Bearer
Parameters
Path Parameters
Organization identifier
Query Parameters
The collection page number
1The number of items per page
30050Filter by the audited entity type (kebab-case), e.g. zone, access-rule, basic-auth-user, certificate.
Filter by the audited entity type (kebab-case), e.g. zone, access-rule, basic-auth-user, certificate.
Filter by the audited entity's identifier as a string (a UUID for UUID-keyed entities, otherwise the numeric id).
Filter by the audited entity's identifier as a string (a UUID for UUID-keyed entities, otherwise the numeric id).
Filter by the UUID of the user who performed the action.
"uuid"Filter by the UUID of the user who performed the action.
Filter by action type. One of create, update, delete.
Filter by action type. One of create, update, delete.
Filter by the denormalised zone id the change occurred in (only set for zone-scoped entities).
Filter by the denormalised zone id the change occurred in (only set for zone-scoped entities).
Filter by the client IP address recorded for the change.
Filter by the client IP address recorded for the change.
Partial (substring) match on the entity's human-readable label.
Partial (substring) match on the entity's human-readable label.
Partial (substring) match on the acting user's display name.
Partial (substring) match on the acting user's display name.
Sort by creation time. Accepts asc or desc (defaults to newest first).
"asc""desc""ASC""DESC"Responses
audit-log collection