List authentication audit events for tenant

Returns paginated authentication audit events for the tenant with optional filtering by principal, status, error code, source IP, operation type, event type pattern and time range. The applied window and the maximum this feed accepts are stated on every accepted response in appliedRange; this description asserts neither.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
uuid
required

Tenant UUID

Query Params
string

Filter by principal identifier (exact match)

string

Filter by status: SUCCESS or FAILURE

string

Filter by error code (upper-snake case)

string

Filter by client IP address (IPv4 or IPv6 literal)

string

Filter by operation type (LOGIN, LOGOUT, REFRESH, ACTIVATION, BLACKLIST)

string

Event type pattern (SQL LIKE syntax, max 5 wildcards)

date-time

Start of time range (ISO-8601). Defaults to now - 30 days.

date-time

End of time range (ISO-8601). Defaults to now.

integer
≥ 0
Defaults to 0

Page number (zero-based)

integer
1 to 100
Defaults to 20

Page size. Values outside 1-100 are CLAMPED to the nearest bound, not rejected: size=5000 returns 100 rows with HTTP 200 and size=0 returns 1 row with HTTP 200. Like listTenantGovernanceEvents and unlike the other paginated reads on this controller, this operation clamps BOTH ends, so the declared range is EFFECTIVE and nothing on this parameter can produce a 400.

Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Language
Credentials
Bearer
JWT
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json