Audit Logs

Retrieves account or zone Audit Log

GET/{accounts_or_zones}/{account_or_zone_id}/security-center/insights/audit-log

Retrieves Issue Audit Log

GET/{accounts_or_zones}/{account_or_zone_id}/security-center/insights/{issue_id}/audit-log

ModelsExpand Collapse

AuditLogListResponse object { id, changed_at, changed_by, 6 more }

id: optional string

UUIDv7 identifier for the audit log entry, time-ordered.

formatuuid

changed_at: optional string

The timestamp when the change occurred.

formatdate-time

changed_by: optional string

The actor that made the change. ‘system’ for automated changes, or a user identifier.

current_value: optional string

The value of the field after the change. Null if the field was cleared.

field_changed: optional "status" or "user_classification"

The field that was changed.

One of the following:

"status"

"user_classification"

issue_id: optional string

The ID of the insight this audit log entry relates to.

previous_value: optional string

The value of the field before the change. Null if the field was not previously set.

rationale: optional string

Optional rationale provided for the change.

zone_id: optional number

The zone ID associated with the insight. Only present for zone-level insights.

formatint64

AuditLogListByInsightResponse object { id, changed_at, changed_by, 6 more }