search_system_audits
Search system audits on the ALTR platform by category and time range. Retrieve results asynchronously.
Instructions
Search ALTR platform system audits.
Starts an async query against system audit logs. Returns a token
to retrieve results with get_system_audit_results. If wait
is set, the API may return results directly (200) or a token
for later retrieval (202).
The from and to time range may be at most one week.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| category | Yes | Audit category. Values: "API Keys", "Locks", "Data", "Administrators", "Thresholds", "Anomalies", "Applications", "User Groups", "Data Sources", "Row Access Policy", "Unified Access Policy", "Access Requests", "Access Management Policy", "Impersonation Policy". | |
| limit | No | Max results (1-100, default 50). | |
| offset | No | Results to skip (default 0). | |
| wait | No | Milliseconds to wait for results (-1 to 1000, default 100). Set to -1 to return immediately with token. | |
| from_date_time | No | ISO 8601 UTC start time. Defaults to 48h ago. | |
| to_date_time | No | ISO 8601 UTC end time. Defaults to now. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||