list_audit_logs
Investigate Cloudflare account changes by listing audit log entries with timestamps, actors, actions, and affected resources to answer who changed what and when.
Instructions
List audit log entries for a Cloudflare account. Returns operation history including timestamps, actors, actions, and affected resources. Useful for investigating who changed what and when.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number of paginated results (default: 1) | |
| since | No | Filter by start date in ISO 8601 format (e.g. 2026-05-01T00:00:00Z) | |
| before | No | Filter by end date in ISO 8601 format | |
| actor_ip | No | Filter by the IP address of the actor | |
| per_page | No | Number of entries per page (default: 25, max: 1000) | |
| direction | No | Sort direction: asc or desc (default: desc) | |
| account_id | Yes | required,The ID of the Cloudflare account | |
| actor_email | No | Filter by the email of the actor |