keycloak_list_events
Search Keycloak user events to diagnose login failures. Filter logins, logouts, failed logins, and registrations by user, client, date, or IP to find why a user cannot log in.
Instructions
Search user events — logins, logouts, failed logins, registrations. The way to answer 'why can't this user log in?'. Requires user event logging to be enabled on the realm.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| max | No | Maximum number of results to return (1-500). Defaults to 50. | |
| type | No | Event types, e.g. ["LOGIN", "LOGIN_ERROR", "LOGOUT", "REGISTER"]. | |
| user | No | Filter by user UUID. | |
| first | No | Pagination offset — index of the first result to return (0-based). | |
| realm | No | Realm to operate on. Defaults to the server's configured realm (KEYCLOAK_REALM). | |
| client | No | Filter by clientId. | |
| dateTo | No | Inclusive upper bound, as YYYY-MM-DD. | |
| dateFrom | No | Inclusive lower bound, as YYYY-MM-DD. | |
| ipAddress | No |