List audit logs - SpecterOps

GET

api

audit

{
  "data": {
    "logs": [
      {
        "id": 123,
        "created_at": "2023-11-07T05:31:56Z",
        "actor_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "actor_name": "<string>",
        "actor_email": "jsmith@example.com",
        "action": "<string>",
        "fields": {},
        "request_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "source_ip_address": "127.0.0.1",
        "commit_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
        "status": "intent"
      }
    ]
  }
}

Authorizations

Authorization

string

header

required

Authorization: Bearer $JWT_TOKEN

Headers

Prefer

integer

default:

Prefer header, used to specify a custom timeout in seconds using the wait parameter as per RFC7240.

Required range: x > 0

Query Parameters

skip

integer

This query parameter is used for determining the number of objects to skip in pagination.

Required range: x > 0

limit

integer

This query parameter is used for setting an upper limit of objects returned in paginated responses.

Required range: x > 0

created_at

string

Filter results by created_at value. See filter schema details for valid predicates.

sort_by

string

Sortable columns are id, actor_id, actor_name, actor_email, action, request_id, created_at, source, and status.

before

string

Return logs created before the specified time. Value should be in the RFC-3339 format. If not supplied, this will default to the current time.

after

string

Return logs created after the specified time. Value should be in the RFC-3339 format. If not supplied, this will default to 1 year before the current time.

string