Export Audit Logs (LOG)
This API exports the audit log entries recorded within the tenant as a log file.
Endpoint Details
| URL | /v1/audit/export-log |
| Method | GET |
| Authorization | Bearer Token |
Request Headers
| Header | Type | Description |
|---|---|---|
| Content-Type | String | Must be application/json |
Response
On success, this endpoint returns a downloadable log file instead of a JSON body. Each line represents a single audit log entry written in a plain-text log format.
Response
[2026-06-11T18:30:48+07:00] [INFO] [backup] [gateway] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=6ms id=f3dae0a6-be9e-4745-8ca4-b812bde9d232 - query_restorestatus
[2026-06-11T18:31:25+07:00] [INFO] [lock.v1] [lock] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=0ms id=979dddfe-59b9-4385-b1d2-66e386daa6cb - LockService.SealStatus
[2026-06-11T18:31:25+07:00] [INFO] [lock] [gateway] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=1ms id=4757cbfb-e766-43c1-b817-6324dcd72412 - query_sealstatus
[2026-06-11T18:31:25+07:00] [INFO] [lock.v1] [lock] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=0ms id=d26601d7-4bd9-4229-9ae5-94c865f49871 - LockService.SealStatus
[2026-06-11T18:31:25+07:00] [INFO] [auth.v1] [auth] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=5ms id=c233e2ed-45bf-4c2f-b34e-fc02650ff02a - TenantService.ListTenants
[2026-06-11T18:31:25+07:00] [INFO] [auth.v1] [auth] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=1ms id=c255595f-e881-4193-b994-42ab262eef49 - UserService.Get
[2026-06-11T18:31:25+07:00] [INFO] [auth.v1] [auth] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=4ms id=9dd3035b-7d03-4347-aa3f-c162c7f68072 - UserService.Get
[2026-06-11T18:31:25+07:00] [INFO] [auth.v1] [auth] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=6ms id=bfb0cafa-49c2-4d3c-a82c-daf7d4499fec - UserService.Get
[2026-06-11T18:31:25+07:00] [INFO] [auth.v1] [auth] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=8ms id=003bca7f-5767-4f1b-af93-8a22b92239f5 - UserService.Get
[2026-06-11T18:31:25+07:00] [INFO] [auth.v1] [auth] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=2ms id=1de7a1cb-0afe-45c1-8c53-f0f1bb6ef441 - UserService.Get
[2026-06-11T18:31:25+07:00] [INFO] [lock] [gateway] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=1ms id=2fdb83ac-3cc1-4caf-b069-f81f3db3a05e - query_sealstatus
[2026-06-11T18:31:25+07:00] [INFO] [auth.v1] [auth] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=1ms id=0b3e73e0-83c3-40d4-990d-d68f23e2939a - UserService.Get
[2026-06-11T18:31:25+07:00] [INFO] [auth] [gateway] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=45ms id=23556691-d7c5-4359-9d60-4622d1ccf72c - query_tenants
[2026-06-11T18:31:25+07:00] [INFO] [auth.v1] [auth] actor=414a45e9-f194-4a8a-9876-97abb990d4d9 status=200 response_time=2ms id=5d99edfa-7510-49cb-b528-87122da50d99 - GroupPermissionService.GetUserGroups
Log Entry Format
Each line follows the format below:
[timestamp] [message_type] [module] [service] actor=<user_id> status=<status_code> response_time=<duration> id=<log_id> - <activity>
| Segment | Description |
|---|---|
| timestamp | Time of the activity in RFC 3339 date-time format |
| message_type | Severity or category of the log message |
| module | Module where the activity occurred |
| service | Service that produced the audit log entry |
| actor | Identifier of the user who performed the activity |
| status | HTTP status code returned by the request |
| response_time | Time taken to process the request, in milliseconds |
| id | Unique identifier of the audit log entry |
| activity | Activity that was performed |
info
- A valid Bearer Token is required to access this endpoint.
- The response is returned as a downloadable log file rather than a JSON body.