get_audit_logs
Retrieve your organization's audit-event log, newest first, with pagination and exact-match filters to trace who did what to which resource and the outcome.
Instructions
Query the organization's audit-event log, newest first, with pagination (defaults page 1, limit 25) and exact-match filters. Every entry records who did what to which resource with which result; an org with no events returns an honest empty page. Requires an admin API key. Use get_audit_log_artifacts for the immutable Parquet artifact copy, and filter by policy_snapshot_id, schema_snapshot_id, manifest_version, or request_hash to trace one execution. Read-only. Returns entries plus total, page, limit, and pages.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | 1-based page number; defaults to 1. | |
| limit | No | Entries per page, up to 100; defaults to 25. | |
| action | No | Keep only events with this action, e.g. execution_policy.update. | |
| result | No | Keep only events with this result value. | |
| actor_email | No | Keep only events by this actor email. | |
| request_hash | No | Keep only events tied to this request hash. | |
| resource_type | No | Keep only events against this resource type. | |
| manifest_version | No | Keep only events tied to this runtime manifest version. | |
| policy_snapshot_id | No | Keep only events tied to this execution-policy snapshot. | |
| schema_snapshot_id | No | Keep only events tied to this schema snapshot. |