Skip to content
Updawg

audit_log_list

GET
/v1/orgs/{org}/audit-log
curl --request GET \
  --url https://api.updawg.net/v1/orgs/example/audit-log

Parameters

Section titled “Parameters”

Path Parameters

Section titled “Path Parameters”
org
required
string

Organization slug.

Query Parameters

Section titled “Query Parameters”
action
string

Only this action, exactly: host.decommissioned.

after
string

The next of the previous page.

Responses

Section titled “Responses”

200

Section titled “200”

A page of the audit log, newest first.

Media typeapplication/json
object
entries
required
Array<object>
object
action
required

host.decommissioned, policy.updated, … Dotted, noun first.

string
actor
required
object
email

Absent for a user this organization can no longer see, such as a removed member. The entry is still theirs.

string | null
kind
required

user, system or policy. ⚠️ policy is an auto-merge — nobody approved it, a rule did — and is not the same as system.

string
name
string | null
user_id
string | null
at
required
string format: date-time
id
required
string
ip

Where the request came from, when one did.

string | null
metadata
required

What the action recorded about itself. Its shape is the action’s.

object
key
additional properties
One of:
string
target
One of:
object
id
required

With the kind’s usual prefix (hst_…), or bare for a kind this build does not know.

string
kind
required

host, group, policy, …

string
next

Pass as ?after= for the next page. Absent at the end. Opaque: a client passes it back and does not read it.

string | null
Examplegenerated
{
  "entries": [
    {
      "action": "example",
      "actor": {
        "email": "example",
        "kind": "example",
        "name": "example",
        "user_id": "example"
      },
      "at": "2026-04-15T12:00:00Z",
      "id": "example",
      "ip": "example",
      "metadata": {
        "additionalProperty": {
          "additionalProperty": {}
        }
      },
      "target": {
        "id": "example",
        "kind": "example"
      }
    }
  ],
  "next": "example"
}

400

Section titled “400”

An unknown parameter, a repeated one, or a cursor that does not parse.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

401

Section titled “401”

No session.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

403

Section titled “403”

Not permitted for this role.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

404

Section titled “404”

No such organization, or not yours.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}

429

Section titled “429”

Over the organization’s request limit. Retry-After says when to try again; RateLimit-Limit is the burst.

Media typeapplication/json
object
detail
string | null
status
required
integer format: int32
title
required
string
type
required
string
Examplegenerated
{
  "detail": "example",
  "status": 1,
  "title": "example",
  "type": "example"
}