Skip to main content
GET
/
api
/
v1
/
audit
List Audit Events
curl --request GET \
  --url https://api.example.com/api/v1/audit
{
  "apiVersion": "v1",
  "kind": "AuditLogList",
  "metadata": {
    "totalCount": 156,
    "page": 1,
    "pageSize": 50
  },
  "items": [
    {
      "id": "audit-20260319-001",
      "timestamp": "2026-03-19T15:35:00Z",
      "action": "approval.approve",
      "user": "carlos.silva@empresa.com",
      "role": "operator",
      "resource": "APR-20260319-001",
      "resourceType": "Approval",
      "namespace": "production",
      "details": {
        "incident": "INC-20260319-001",
        "comment": "Aprovado — analise de IA confirma necessidade de aumento de memoria"
      },
      "sourceIP": "10.0.1.50",
      "userAgent": "Mozilla/5.0"
    },
    {
      "id": "audit-20260319-002",
      "timestamp": "2026-03-19T15:30:00Z",
      "action": "incident.acknowledge",
      "user": "carlos.silva@empresa.com",
      "role": "operator",
      "resource": "INC-20260319-001",
      "resourceType": "Incident",
      "namespace": "production",
      "details": {
        "message": "Investigando aumento de memoria no payment-service"
      },
      "sourceIP": "10.0.1.50",
      "userAgent": "Mozilla/5.0"
    },
    {
      "id": "audit-20260319-003",
      "timestamp": "2026-03-19T15:21:05Z",
      "action": "remediation.execute",
      "user": "system",
      "role": "system",
      "resource": "INC-20260319-001",
      "resourceType": "Remediation",
      "namespace": "production",
      "details": {
        "runbook": "runbook-oomkill-standard",
        "step": "diagnose-memory-usage",
        "result": "success"
      },
      "sourceIP": "internal",
      "userAgent": "chatcli-operator/1.0"
    }
  ]
}
​
action
string
Filter by action type: incident.acknowledge, incident.snooze, approval.approve, approval.reject, runbook.create, runbook.update, runbook.delete, remediation.execute, config.update
​
user
string
Filter by user who performed the action
​
resource
string
Filter by affected resource (e.g., INC-20260319-001)
​
since
string
Filter events from a given ISO 8601 date
​
until
string
Filter events up to a given ISO 8601 date
​
page
integer
default:"1"
Page number
​
pageSize
integer
default:"50"
Items per page (maximum 200)
{
  "apiVersion": "v1",
  "kind": "AuditLogList",
  "metadata": {
    "totalCount": 156,
    "page": 1,
    "pageSize": 50
  },
  "items": [
    {
      "id": "audit-20260319-001",
      "timestamp": "2026-03-19T15:35:00Z",
      "action": "approval.approve",
      "user": "carlos.silva@empresa.com",
      "role": "operator",
      "resource": "APR-20260319-001",
      "resourceType": "Approval",
      "namespace": "production",
      "details": {
        "incident": "INC-20260319-001",
        "comment": "Aprovado — analise de IA confirma necessidade de aumento de memoria"
      },
      "sourceIP": "10.0.1.50",
      "userAgent": "Mozilla/5.0"
    },
    {
      "id": "audit-20260319-002",
      "timestamp": "2026-03-19T15:30:00Z",
      "action": "incident.acknowledge",
      "user": "carlos.silva@empresa.com",
      "role": "operator",
      "resource": "INC-20260319-001",
      "resourceType": "Incident",
      "namespace": "production",
      "details": {
        "message": "Investigando aumento de memoria no payment-service"
      },
      "sourceIP": "10.0.1.50",
      "userAgent": "Mozilla/5.0"
    },
    {
      "id": "audit-20260319-003",
      "timestamp": "2026-03-19T15:21:05Z",
      "action": "remediation.execute",
      "user": "system",
      "role": "system",
      "resource": "INC-20260319-001",
      "resourceType": "Remediation",
      "namespace": "production",
      "details": {
        "runbook": "runbook-oomkill-standard",
        "step": "diagnose-memory-usage",
        "result": "success"
      },
      "sourceIP": "internal",
      "userAgent": "chatcli-operator/1.0"
    }
  ]
}