List audit logs
Lists administrative changes made in this workspace, newest first: role changes, invitations, website and access changes, group edits, and API key activity. Each entry names who did it, what was affected, and carries the details of the change. Entries are never edited or deleted. Filter by action, actor, target, or time range, or search across all of them with search.
Requires the admin role on the workspace.
AuthorizationBearer <JWT>An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.
workspaceId*stringThe workspace's id.
cursor?stringThe nextCursor of the previous page. Omit it to start from the beginning. A cursor encodes a position and is not meant to be built by hand.
limit*|How many items to return, from 1 to 200.
1 <= value <= 20050action?stringOnly entries for this action. Send an empty string for all.
"""workspace.updated""workspace.ownership_transferred""workspace.mfa_enforcement_changed""workspace.ai_integrations_changed""member.role_updated""member.removed""invitation.created""invitation.revoked""invitation.accepted""website.created""website.updated""website.settings_updated""website.deleted""website.reports_reset""website.subdomain_claimed""website.tags_updated""website_tag.created""website_tag.updated""website_tag.deleted""access.member_granted""access.member_revoked""access.group_granted""access.group_revoked""group.created""group.updated""group.deleted""group.member_added""group.member_removed""api_key.created""api_key.revoked""alert_channel.created""alert_channel.updated""alert_channel.deleted""alert_rule.created""alert_rule.updated""alert_rule.deleted""payment_page.created""payment_page.updated""payment_page.deleted""inventory_rule.created""inventory_rule.updated""inventory_rule.deleted""usage_alerts.recipients_updated""reports.exported""inventory.exported""technologies.exported""compliance.evidence_exported""audit_log.exported""scan.started""scan.report_exported""csp_policy.exported""csp_sources.exported""permissions_policy.exported""connection_allowlist.exported""permissions_policy_values.exported""connection_allowlist_destinations.exported"actorId?stringOnly changes made by this user.
length <= 255targetType?stringOnly entries about this kind of thing. Send an empty string for all.
"""workspace""member""invitation""website""website_tag""group""access_grant""api_key""alert_channel""alert_rule""payment_page""inventory_rule""scan"targetId?stringOnly entries about this specific thing.
length <= 255from?stringOnly entries at or after this time.
date-timeto?stringOnly entries at or before this time.
date-timesearch?stringMatch part of the action, the target, or the actor's name or email.
length <= 255A page of audit log entries.
application/json- response
data*array<>The audit log entries on this page.
pagination*Where this page sits in the full result set.
curl -X GET 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/audit-logs?limit=50'{ "data": [ { "id": "string", "workspaceId": "string", "actorId": "string", "actor": { "email": "string", "firstName": "string", "lastName": "string", "picture": "string" }, "action": "member.role_updated", "targetType": "member", "targetId": "string", "metadata": {}, "createdAt": "2019-08-24T14:15:22Z" } ], "pagination": { "nextCursor": "string", "hasMore": true, "total": 0 }}