Skip to main content

AuditLogsFilter

Filter criteria for narrowing which audit log events are returned.

All filters are combined with AND logic — an event must match every specified filter to be included in the results. Omit a filter to not restrict on that field.

input AuditLogsFilter {
occurredAt: DatetimeFilter
type: StringFilter
actorType: AuditLogActorTypeFilter
actorId: IdFilter
actor: ActorSearchFilter
}

Fields

AuditLogsFilter.occurredAt ● DatetimeFilter input {#occurred-at}

Filter by when the event occurred. Supports eq for a point in time, gt/gte for lower bounds, and lt/lte for upper bounds. Combine gte and lte for a range.

AuditLogsFilter.type ● StringFilter input {#type}

Filter by event type using dot notation (e.g., project.created, deployment.completed). Supports eq for an exact match and in for matching any value in a list.

AuditLogsFilter.actorType ● AuditLogActorTypeFilter input {#actor-type}

Filter by the type of actor that performed the action (e.g., only human users or only deployments).

AuditLogsFilter.actorId ● IdFilter input {#actor-id}

Filter by the specific actor's identifier. Matches across all actor types (account, service account, deployment).

AuditLogsFilter.actor ● ActorSearchFilter input {#actor}

Search actors by a substring match across their identifying fields (email and name for users, name for service accounts, ID for deployments and system actions). Useful for finding every action taken by a person or bot without knowing their exact ID.

Member Of

auditLogs query