Audit Logs

Retrieves account or zone Audit Log

security_center.insights.audit_logs.list() -> SyncCursorPagination[AuditLogListResponse]

GET/{accounts_or_zones}/{account_or_zone_id}/security-center/insights/audit-log

Retrieves Issue Audit Log

security_center.insights.audit_logs.list_by_insight(, ) -> SyncCursorPagination[AuditLogListByInsightResponse]

GET/{accounts_or_zones}/{account_or_zone_id}/security-center/insights/{issue_id}/audit-log

ModelsExpand Collapse

class AuditLogListResponse: …

id: Optional[str]

UUIDv7 identifier for the audit log entry, time-ordered.

formatuuid

changed_at: Optional[datetime]

The timestamp when the change occurred.

formatdate-time

changed_by: Optional[str]

The actor that made the change. ‘system’ for automated changes, or a user identifier.

current_value: Optional[str]

The value of the field after the change. Null if the field was cleared.

field_changed: Optional[Literal["status", "user_classification"]]

The field that was changed.

One of the following:

"status"

"user_classification"

issue_id: Optional[str]

The ID of the insight this audit log entry relates to.

previous_value: Optional[str]

The value of the field before the change. Null if the field was not previously set.

rationale: Optional[str]

Optional rationale provided for the change.

zone_id: Optional[int]

The zone ID associated with the insight. Only present for zone-level insights.

formatint64

class AuditLogListByInsightResponse: …