Get audit log entries for an Account

Fetch audit logs with some filtering capabilities via query params

SecurityJWT or OAuth2 or DeveloperToken
Request
path Parameters
account_id
required
string <uuid>

Account ID

Example: erfb57e0-79f2-4bc7-9b70-99fbc175175c
query Parameters
filters[start_date]
string <date>

Start ISO Date

Example: filters[start_date]=2024-06-03
filters[end_date]
string <date>

End ISO Date

Example: filters[end_date]=2024-06-18
filters[resource_type]
string

Filter by Resource Type

Enum: "asset" "review_link" "presentation" "collaborator" "pending_collaborator" "comment" "review_link_item" "account" "account_member" "pending_account_member" "subscription" "subscription_line_item" "team" "team_member" "pending_team_member" "user" "action" "oauth_app" "user_token" "webhook" "file" "folder" "version_stack" "like" "read"
filters[event_type]
string

Filter by Type of Activity

Enum: "account_locked" "account_member_created" "account_member_deleted" "account_member_updated" "account_mfa_enforced" "account_fio_version_migrated" "account_fio_version_migrated" "account_ownership_transferred" "account_restored" "account_updated" "label_updated" "collaborator_added" "comment_created" "join_presentation_request_approved" "join_project_request_approved" "join_review_link_request_approved" "join_team_request_approved" "account_permissions_granted_to_user" "comment_liked" "file_uploaded" "project_permissions_granted_to_account_user_group" "project_permissions_granted_to_user" "resource_invite_sent" "share_viewed" "transfer_batch_completed" "user_mfa_enforced" "workspace_permissions_granted_to_account_user_group" "workspace_permissions_granted_to_user" "new_device_login" "password_changed" "password_reset_requested" "pending_account_member_created" "pending_account_member_deleted" "pending_team_member_created" "pending_team_member_deleted" "project_unarchived" "push_tokens_added" "push_tokens_deleted" "role_added" "role_removed" "session_revoked" "team_created" "team_creator_updated" "team_deleted" "team_lifecycle_policy_updated" "team_member_created" "team_member_deleted" "team_member_reset" "team_member_updated" "team_updated" "anonymous_user_created" "comment_completed" "comment_deleted" "comment_uncompleted" "comment_updated" "join_request_accepted" "join_request_created" "join_request_declined" "join_request_deleted" "join_request_reset" "pending_reviewer_created" "pending_reviewer_deleted" "presentation_created" "presentation_deleted" "presentation_updated" "project_archived" "project_created" "project_deleted" "project_invite_link_created" "project_invite_link_revoked" "project_moved" "project_restored" "project_updated" "reviewer_created" "reviewer_deleted" "review_link_assets_added" "review_link_assets_deleted" "review_link_created" "review_link_deleted" "review_link_emailed" "review_link_updated" "subscription_cancelled" "subscription_card_updated" "subscription_created" "subscription_line_item_created" "subscription_line_item_deleted" "subscription_restored" "subscription_updated" "action_created" "action_deleted" "action_updated" "webhook_created" "webhook_deleted" "webhook_updated" "asset_copied" "asset_created" "asset_deleted" "asset_moved" "asset_restored" "assets_unversioned" "asset_updated" "asset_versioned" "high_risk_sign_up" "sbwm_template_created" "sbwm_template_deleted" "sbwm_template_updated" "allowed_domain_created" "allowed_domain_deleted" "collaborator_deleted" "media_deleted" "asset_metadata_created" "media_created" "pending_collaborator_created" "pending_collaborator_deleted" "plan_created" "plan_deleted" "plan_updated" "preference_updated" "asset_archived" "asset_unarchived" "project_archive_completed" "project_unarchive_completed" "reply_created"
filters[team_id]
string <uuid>

Filter by Team ID

filters[project_id]
string <uuid>

Filter by Project ID

filters[resource_id]
string <uuid>

Filter by resource ID (Asset ID, Project ID, User ID)

filters[user_id]
string <uuid>

Filter by User ID

filters[ip_address]
string

Filter by IP Address

This supports both IPv4 (1.1.1.1) and IPv6 (2001:db8:3333:4444:5555:6666:7777:8888)

page
integer
Default: 1

Page number

page_size
integer <= 200
Default: 50

Records per page

Responses
200

Succesful Event logs response

Response Headers
link
string

Pagination links

page-number
integer

Current page of results

per-page
integer <= 200
Default: 50

Number of entries per page

total
integer

Total entries across all pagess

total-pages
integer

Number of pages

Response Schema: application/json
Array
account_id
string or null <uuid>
anonymous_user_id
string or null <uuid>
client
string or null

The API client the audit event was triggered by. This will not always be populated.

When the API call that produced an event was made via an OAuth app it will look like: oauth_app/:uuid, and if it was made via a developer token it will look like: user_token/:uuid, with the UUID being the User ID the token belongs to

Here are some examples:

  • user_token/57823879-e541-49b0-b902-c43794c4400c
  • oauth_app/80ccf0bb-ae91-49c4-8aec-8f6238c14947
  • web/2024-06-10-18-15
  • pipeline-media-warden/cbd0061f6f190489e8af3137b8707b33f498f53f
  • null
event_type
string
Enum: "account_locked" "account_member_created" "account_member_deleted" "account_member_updated" "account_mfa_enforced" "account_fio_version_migrated" "account_fio_version_migrated" "account_ownership_transferred" "account_restored" "account_updated" "label_updated" "collaborator_added" "comment_created" "email_address_changed" "email_confirmed" "google_auth_disabled" "join_presentation_request_approved" "join_project_request_approved" "join_review_link_request_approved" "join_team_request_approved" "login_factor_created" "login_factor_validated" "account_permissions_granted_to_user" "comment_liked" "email_change_confirmation_requested" "file_uploaded" "google_auth_enabled" "new_user_email_confirmation_requested" "project_permissions_granted_to_account_user_group" "project_permissions_granted_to_user" "resource_invite_sent" "share_viewed" "transfer_batch_completed" "user_mfa_enforced" "workspace_permissions_granted_to_account_user_group" "workspace_permissions_granted_to_user" "new_device_login" "password_changed" "password_reset_requested" "pending_account_member_created" "pending_account_member_deleted" "pending_team_member_created" "pending_team_member_deleted" "project_unarchived" "push_tokens_added" "push_tokens_deleted" "role_added" "role_removed" "session_revoked" "team_created" "team_creator_updated" "team_deleted" "team_lifecycle_policy_updated" "team_member_created" "team_member_deleted" "team_member_reset" "team_member_updated" "team_updated" "user_deactivated" "user_login" "user_login_attempt" "user_reactivated" "user_updated" "anonymous_user_created" "comment_completed" "comment_deleted" "comment_uncompleted" "comment_updated" "join_request_accepted" "join_request_created" "join_request_declined" "join_request_deleted" "join_request_reset" "pending_reviewer_created" "pending_reviewer_deleted" "presentation_created" "presentation_deleted" "presentation_updated" "project_archived" "project_created" "project_deleted" "project_invite_link_created" "project_invite_link_revoked" "project_moved" "project_restored" "project_updated" "reviewer_created" "reviewer_deleted" "review_link_assets_added" "review_link_assets_deleted" "review_link_created" "review_link_deleted" "review_link_emailed" "review_link_updated" "subscription_cancelled" "subscription_card_updated" "subscription_created" "subscription_line_item_created" "subscription_line_item_deleted" "subscription_restored" "subscription_updated" "user_signup" "action_created" "action_deleted" "action_updated" "oauth_app_created" "oauth_app_deleted" "oauth_app_updated" "oauth_app_enabled" "oauth_app_disabled" "user_token_created" "user_token_deleted" "user_token_disabled" "user_token_enabled" "user_token_updated" "webhook_created" "webhook_deleted" "webhook_updated" "asset_copied" "asset_created" "asset_deleted" "asset_moved" "asset_restored" "assets_unversioned" "asset_updated" "asset_versioned" "high_risk_sign_up" "sbwm_template_created" "sbwm_template_deleted" "sbwm_template_updated" "allowed_domain_created" "allowed_domain_deleted" "collaborator_deleted" "media_deleted" "asset_metadata_created" "media_created" "pending_collaborator_created" "pending_collaborator_deleted" "plan_created" "plan_deleted" "plan_updated" "preference_updated" "asset_archived" "asset_unarchived" "project_archive_completed" "project_unarchive_completed" "reply_created"
event_details
object

The details for the event. This varies quite a bit from one type of event to another but there are some examples in the example responses.

id
number <number>

Unique identifier

inserted_at
string <date-time>
ip_address
string or null

The IP address associated with this event

project_id
string or null <uuid>

The Project ID that this action occured in

resource_id
string <uuid>

The ID of the referenced resource

resource_type
string

The type of the referenced resource

Enum: "account" "account_member" "action" "anonymous_user" "asset" "comment_impression" "comment" "folder" "join_request" "login_factor" "oauth_app" "pending_account_member" "pending_reviewer" "pending_team_member" "presentation" "project" "project_invite_link" "reviewer" "review_link" "reset_token" "share" "subscription" "subscription_line_item" "team" "team_member" "user" "user_token" "transfer_batch" "version_stack" "webhook"
team_id
string or null <uuid>

Team ID

source
string

The Source of the action that produced a given audit log entry

Enum: "device" "internal" "external" "unknown"
user_id
string or null <uuid>

User ID

updated_at
string <date-time>
401

Unauthorized response

404

Not Found response

get/v2/accounts/{account_id}/events
Request samples
Response samples
application/json
[
  • {
    }
]