search_audit_logs
Search and filter iSuite audit trail logs by user, action, resource, date range, and outcome to investigate events.
Instructions
Search iSuite audit trail logs with flexible filtering across users, actions, and time ranges.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Free-text search query against log message and metadata fields. | |
| userId | No | Filter logs by the user who performed the action. | |
| action | No | Filter by action type (e.g. 'LOGIN', 'USER_CREATE', 'JOB_CANCEL', 'CONFIG_UPDATE'). | |
| resourceType | No | Filter by resource type (e.g. 'user', 'job', 'batch', 'schedule', 'config'). | |
| resourceId | No | Filter by specific resource ID. | |
| dateFrom | No | ISO-8601 start datetime for the search window. | |
| dateTo | No | ISO-8601 end datetime (default: now). | |
| outcome | No | Filter by outcome of the action (default 'all'). | |
| limit | No | Maximum results to return (default 100, max 1000). | |
| offset | No | Pagination offset (default 0). |