Filter by the stored status of the admin operation. Two values only: AuditOutcome is the producer contract for admin_audit_log.status, so DENIED - which the CRYPTO timeline does accept - is a value this column cannot hold and offering it would be a filter that returns nothing.

Filter by action (exact match). Matched against the stored action column, whose value set is the producer's own operation enum: CREATE, UPDATE, DELETE, BOOTSTRAP, TIER_UPGRADE. It is NOT an event-type string - 'admin.humanuser.create' is an eventType and matches no row here.

Filter by the PERSISTED entity-type token, validated against the single-sourced platform vocabulary; an unknown value is rejected with 400, not answered with an empty page. The tokens carry no separator and are not the producer's class name: 'HUMANUSER', not 'USER' or 'HumanUserEntity'. Read the accepted set from GET /api/v3/audit/vocabulary rather than transcribing one.

Filter by actor ID (exact match)

Generated from available response content types