List Scaleway Audit Trail combined events
scaleway_audit_list_combined_eventsMerge API, authentication, and system audit events into one chronological feed, tagged by kind. Use for timeline investigations spanning multiple streams.
Instructions
List all three Audit Trail event streams in one chronological feed - each event is tagged with its kind (api, auth, or system) and compacted per-kind. Use this when investigating a timeline across streams; use the per-stream tools (scaleway_audit_list_events, _list_authentication_events, _list_system_events) when one stream is enough. Requires the AuditTrailReadOnly permission set on THIS server's own credential; if every call fails with permissions_denied, that's very likely why - grant it via scaleway_iam_set_policy_rules (organization scope). Defaults to the last 24 hours. Cursor-based pagination with no total_count, same caveats as scaleway_audit_list_events.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| region | No | Defaults to the server's configured region (fr-par). | |
| order_by | No | Default recorded_at_desc (newest first). | |
| max_pages | No | Safety cap on pagination (100 items/page). Default 20. Said to be truncated in the response if more pages remained. | |
| project_id | No | Filter to one Project. Omit for the whole Organization. | |
| full_detail | No | false (default): each event is compacted per its kind (api/auth/system). true: return every field the API provides. | |
| resource_type | No | Server-side filter on Scaleway's resource_type values - see scaleway_audit_list_products for the catalog. | |
| recorded_after | No | ISO 8601 date-time, inclusive. Defaults to 24 hours ago. | |
| recorded_before | No | ISO 8601 date-time, exclusive. Defaults to now (omitted from the request). |