recent_admin_events
Fetch enterprise admin event logs to inspect sharing and collaboration actions. Filter by event type and time window for early-warning leakage detection.
Instructions
Fetch recent enterprise admin_logs events (raw passthrough).
Diagnostic/starter tool: returns Box events verbatim so the real event types and field shapes can be confirmed before analytics tools are layered on. For external-sharing work the event types of interest are typically COLLABORATION_INVITE / COLLAB_ADD_COLLABORATOR, SHARED_LINK_CREATED / ITEM_SHARED_CREATE, and DOWNLOAD / PREVIEW.
Args:
event_types: Comma-separated Box event_type filter (empty = all types).
since_hours: Look-back window in hours (default 24).
limit: Max events to return in this page (default 100).
stream_position: Continue a previous page by passing back the
next_stream_position from the prior call (empty = first page).
Box caps a single page at 500, so manual paging is needed to walk a
busy window — or use external_access_events which pages for you.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| event_types | No | ||
| since_hours | No | ||
| stream_position | No |