Skip to main content
GET
Get audit logs

Authorizations

X-Qanapi-Authorization
string
header
required

A machine credential, qk_ followed by its secret. The first twelve characters are an indexed prefix; the rest is compared in constant time against a stored SHA-256 hash. A key reaches only the configurations it is linked to.

It may also be sent as Authorization: Bearer qk_..., which is recognised by the prefix.

Query Parameters

from
string<date-time>
to
string<date-time>
action
string

An exact action, or a kms.* style prefix.

Examples:

"encryption.encrypt"

"kms.*"

container_id
string
principal_id
string
principal_type
enum<string>

The kinds of principal a policy or a clearance grant may name. An audit record may additionally carry anonymous or system.

Available options:
user,
api_key,
role
status
enum<string>
Available options:
success,
denied,
error
request_id
string
instance_id
string

Restrict to one cluster node. Hash chains are maintained per instance, so this is the natural unit for chain verification.

page
integer
default:1

1-based page number.

Required range: x >= 1
per_page
integer
default:15
Required range: 1 <= x <= 200

Response

A page of records.

The paginator envelope of the v3 API this service replaces, reproduced field for field so a console that walks next_page_url keeps working.

current_page
integer
required
data
object[]
required
last_page
integer
required

At least 1

path
string<uri>
required
per_page
integer
required
total
integer
required
first_page_url
string<uri>
from
integer | null

1-based index of the first row on this page; null when empty.

last_page_url
string<uri>

Built for rendering a pager. Labels carry HTML entities.

next_page_url
string<uri> | null
prev_page_url
string<uri> | null
to
integer | null