query_audit_events
Retrieve audit events from connected tools with filters on source, skill, status, risk level, and approval. Use to gather compliance evidence across your AIops agents.
Instructions
[READ] Cross-tool audit event query — the workhorse.
Args: source: Restrict to one source tool (e.g. nutanix-aiops). skill / tool / status / risk_level: Field filters. approved: True = only ops with an approver; False = only ops without one. selector: Evidence class filter — audit_trail / attribution / change / enforcement / exception. since / until: ISO timestamps bounding the period. limit: Max rows to return.
Returns {"events": [...], "count": N, "returned": N, "limit": L, "truncated": bool}. When truncated is true more events matched than
were returned — narrow the filters or raise the limit. Never characterise
the trail (counts, "no violations found") from a truncated result.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | ||
| limit | No | ||
| since | No | ||
| skill | No | ||
| until | No | ||
| source | No | ||
| status | No | ||
| approved | No | ||
| selector | No | ||
| risk_level | No |