List Scaleway Audit Trail combined events
scaleway_audit_list_combined_eventsCombine API, authentication, and system audit events into a single chronological feed, tagged by type, for cross-stream timeline analysis. Use for investigating a timeline across streams; filter by project, time range, or resource type.
Instructions
List all three Audit Trail event streams in one chronological feed - each event is tagged with its kind (api, auth, or system) and compacted per-kind. Use this when investigating a timeline across streams; use the per-stream tools (scaleway_audit_list_events, _list_authentication_events, _list_system_events) when one stream is enough. Requires the AuditTrailReadOnly permission set on THIS server's own credential; if every call fails with permissions_denied, that's very likely why - grant it via scaleway_iam_set_policy_rules (organization scope). Defaults to the last 24 hours. Cursor-based pagination with no total_count, same caveats as scaleway_audit_list_events.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| region | No | Defaults to the server's configured region (fr-par). | |
| order_by | No | Default recorded_at_desc (newest first). | |
| max_pages | No | Safety cap on pagination (100 items/page). Default 20. Said to be truncated in the response if more pages remained. | |
| project_id | No | Filter to one Project. Omit for the whole Organization. | |
| full_detail | No | false (default): each event is compacted per its kind (api/auth/system). true: return every field the API provides. | |
| resource_type | No | Server-side filter on Scaleway's resource_type values - see scaleway_audit_list_products for the catalog. | |
| recorded_after | No | ISO 8601 date-time, inclusive. Defaults to 24 hours ago. | |
| recorded_before | No | ISO 8601 date-time, exclusive. Defaults to now (omitted from the request). |