list_activitylog_events
Audit API requests made against an IONOS CLOUD contract by querying the activity log. Filter by user, date range, or event type to investigate specific actions on resources.
Instructions
Query the IONOS CLOUD activity log: full audit trail of API requests made against a contract (who did what, when, on which resource). Requires ACCESS_ACTIVITY_LOG privilege on the token. Defaults: last 7 days, limit 25, RequestStatusUpdate events excluded. Use user filter to narrow to a specific account. Use event_types to restrict to e.g. ['Error','RequestAccepted']. Maximum date range is 90 days — paginate or narrow the window for longer spans. Use list_activitylog_contracts first to look up the contract number if needed.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| user | No | filter by username (client-side); e.g. 'ionosctl-v6@cloud.ionos.com' — drastically reduces output when investigating a specific user | |
| limit | No | max events to return; defaults to 25; increase only when the user explicitly asks for bulk data | |
| offset | No | 0-based pagination offset | |
| contract | Yes | the contract number whose activity log to query; reseller/partner users get IDs from list_activitylog_contracts, single-contract users read it from their JWT | |
| date_end | No | inclusive end date YYYY-MM-DD; defaults to today when omitted; maximum range is 90 days | |
| date_start | No | inclusive start date YYYY-MM-DD; defaults to 7 days ago when omitted | |
| event_types | No | filter to these event types only (client-side); e.g. ['Error','RequestAccepted'] — omit Provision and RequestStatusUpdate to cut ~65% of typical log volume | |
| include_status_updates | No | include RequestStatusUpdate events (default false); these are async provisioning echoes that account for ~55% of log volume and are rarely useful |