Audit Logs

Retrieves account or zone Audit Log

client.securityCenter.insights.auditLogs.list(?, ?): CursorPagination<AuditLogListResponse { id, changed_at, changed_by, 6 more } >

GET/{accounts_or_zones}/{account_or_zone_id}/security-center/insights/audit-log

Retrieves Issue Audit Log

client.securityCenter.insights.auditLogs.listByInsight(, ?, ?): CursorPagination<AuditLogListByInsightResponse { id, changed_at, changed_by, 6 more } >

GET/{accounts_or_zones}/{account_or_zone_id}/security-center/insights/{issue_id}/audit-log

ModelsExpand Collapse

AuditLogListResponse { id, changed_at, changed_by, 6 more }

id?: string

UUIDv7 identifier for the audit log entry, time-ordered.

formatuuid

changed_at?: string

The timestamp when the change occurred.

formatdate-time

changed_by?: string

The actor that made the change. ‘system’ for automated changes, or a user identifier.

current_value?: string | null

The value of the field after the change. Null if the field was cleared.

field_changed?: "status" | "user_classification"

The field that was changed.

One of the following:

"status"

"user_classification"

issue_id?: string

The ID of the insight this audit log entry relates to.

previous_value?: string | null

The value of the field before the change. Null if the field was not previously set.

rationale?: string | null

Optional rationale provided for the change.

zone_id?: number

The zone ID associated with the insight. Only present for zone-level insights.

formatint64

AuditLogListByInsightResponse { id, changed_at, changed_by, 6 more }