Skip to main content

diagrid audit list

List audit events

Description​

List an organization's audit events (the Activity feed).

Recent events are read from Loki and older events (beyond Loki retention) from the signed archives; each event shows an integrity status so tampering of archived logs is surfaced.

diagrid audit list [flags]

Examples​


# List recent audit events (default lookback)
diagrid audit list

# Last 7 days, only 'request' events, as JSON
diagrid audit list --since 168h --type request --output json

# A specific time window, oldest first
diagrid audit list --since 2026-07-01T00:00:00Z --until 2026-07-02T00:00:00Z --sort-order asc

Options​

-o, --output string Output format, supported [table, yaml, json] (default "table")
-t, --type strings Filter by entry type (repeatable)
--source strings Filter by source type (repeatable)
--correlation-id string Filter by correlation id
--search string Free-text search over the event payload
--since string Start of the window: RFC3339 or a duration like 24h (default: service lookback)
--until string End of the window: RFC3339 or a duration like 1h (default: now)
--sort-order string Sort order: asc or desc (default "desc")
--limit int Maximum number of events to return
-h, --help help for list

Options inherited from parent commands​

--api-key string Diagrid Cloud API key

SEE ALSO​