# diagrid audit list

List audit events

### Description

List an organization's audit events (the Activity feed).

Recent events are read from Loki and older events (beyond Loki retention) from
the signed archives; each event shows an integrity status so tampering of
archived logs is surfaced.

```
diagrid audit list [flags]
```

### Examples

```

  # List recent audit events (default lookback)
  diagrid audit list

  # Last 7 days, only 'request' events, as JSON
  diagrid audit list --since 168h --type request --output json

  # A specific time window, oldest first
  diagrid audit list --since 2026-07-01T00:00:00Z --until 2026-07-02T00:00:00Z --sort-order asc

```

### Options

```
  -o, --output string           Output format, supported [table, yaml, json] (default "table")
  -t, --type strings            Filter by entry type (repeatable)
      --source strings          Filter by source type (repeatable)
      --correlation-id string   Filter by correlation id
      --search string           Free-text search over the event payload
      --since string            Start of the window: RFC3339 or a duration like 24h (default: service lookback)
      --until string            End of the window: RFC3339 or a duration like 1h (default: now)
      --sort-order string       Sort order: asc or desc (default "desc")
      --limit int               Maximum number of events to return
  -h, --help                    help for list
```

### Options inherited from parent commands

```
      --api-key string   Diagrid Cloud API key
```

### SEE ALSO

- [diagrid audit](./audit.md)	 - View organization audit events (Activity)