Skip to main content

diagrid audit list

List audit events

Description

List an organization's audit events (the Activity feed).

Recent events are read from Loki and older events (beyond Loki retention) from the signed archives; each event shows an integrity status so tampering of archived logs is surfaced.

diagrid audit list [flags]

Examples


# List recent audit events (default lookback)
diagrid audit list

# Last 7 days, only 'request' events, as JSON
diagrid audit list --since 168h --type request --output json

# A specific time window, oldest first
diagrid audit list --since 2026-07-01T00:00:00Z --until 2026-07-02T00:00:00Z --sort-order asc

Options

-o, --output string Output format, supported [table, yaml, json] (default "table")
-t, --type strings Filter by entry type (repeatable)
--source strings Filter by source type (repeatable)
--correlation-id string Filter by correlation id
--search string Free-text search over the event payload
--since string Start of the window: RFC3339 or a duration like 24h (default: service lookback)
--until string End of the window: RFC3339 or a duration like 1h (default: now)
--sort-order string Sort order: asc or desc (default "desc")
--limit int Maximum number of events to return
-h, --help help for list

Options inherited from parent commands

--api-key string Diagrid Cloud API key

SEE ALSO