Synopsis
Subcommands
list
List audit log entries with filtering.Options
| Flag | Type | Description |
|---|---|---|
--start | ISO 8601 | Start time (e.g. 2024-01-01T00:00:00Z) |
--end | ISO 8601 | End time (e.g. 2024-01-31T23:59:59Z) |
--user-id | string | Filter by operator user ID |
--operation | string | Filter by operation type (e.g. UserLogin, CreatedApiKey) |
--per-page | number | Results per page (default: 50, max: 1000) |
--all | flag | Fetch all pages automatically |
Examples
Output columns
Table output includes all fields returned by the API:| Column | Description |
|---|---|
| ID | Audit log entry ID |
| OPERATION | Operation type (e.g. UserLogin, CreatedApiKey) |
| TIME | Operation timestamp |
| USER ID | Operator user ID |
| Operator email address | |
| IP | IP address |
| USER AGENT | Browser/client user agent |
| COUNTRY | Country (from IP geolocation) |
| CITY | City (from IP geolocation) |
| REGION | Region (from IP geolocation) |
| TENANT ID | Tenant ID |
| ORG ID | Organization ID |