Audit logs

query AuditEvents($after: String, $before: String, $filter: AuditEventFilterInput!, $limit: Int, $order: PaginationOrder) {
  auditEvents(after: $after, before: $before, filter: $filter, limit: $limit, order: $order) {
    data {
      action
      actor {
        id
        name
        type
      }
      createdAt
      data
      id
      occurredAt
      targets
      updatedAt
    }
    listMetadata {
      after
      before
    }
  }
}

{
  "data": {
    "auditEvents": {
      "data": [
        {
          "action": "action_example",
          "actor": {
            "id": "id_example",
            "name": "name_example",
            "type": "type_example"
          },
          "createdAt": "2024-01-01T00:00:00.000Z",
          "data": {},
          "id": "id_01EHWNCE74X7JSDV0X3SZ3KJNY",
          "occurredAt": "2024-01-01T00:00:00.000Z",
          "targets": [
            "targets_example"
          ],
          "updatedAt": "2024-01-01T00:00:00.000Z"
        }
      ],
      "listMetadata": {
        "after": "after_example",
        "before": "before_example"
      }
    }
  }
}

query AuditEvent($id: ID!) {
  auditEvent(id: $id) {
    action
    actor {
      id
      name
      type
    }
    createdAt
    data
    id
    occurredAt
    targets
    updatedAt
  }
}

{
  "data": {
    "auditEvent": {
      "action": "action_example",
      "actor": {
        "id": "id_example",
        "name": "name_example",
        "type": "type_example"
      },
      "createdAt": "2024-01-01T00:00:00.000Z",
      "data": {},
      "id": "id_01EHWNCE74X7JSDV0X3SZ3KJNY",
      "occurredAt": "2024-01-01T00:00:00.000Z",
      "targets": [
        "targets_example"
      ],
      "updatedAt": "2024-01-01T00:00:00.000Z"
    }
  }
}

mutation CreateAuditLogExport($input: CreateAuditLogExportInput!) {
  createAuditLogExport(input: $input) {
    __typename
    ... on AuditLogExport {
      createdAt
      id
      state
      updatedAt
      url
    }
    ... on InvalidAuditLogExportDateRange {
      message
    }
    ... on NoAuditEventsFound {
      message
    }
  }
}

{
  "data": {
    "createAuditLogExport": {
      "__typename": "AuditLogExport",
      "createdAt": "2024-01-01T00:00:00.000Z",
      "id": "id_01EHWNCE74X7JSDV0X3SZ3KJNY",
      "state": "Pending",
      "updatedAt": "2024-01-01T00:00:00.000Z",
      "url": null
    }
  }
}

query AuditLogExport($id: ID!) {
  auditLogExport(id: $id) {
    createdAt
    id
    state
    updatedAt
    url
  }
}

{
  "data": {
    "auditLogExport": {
      "createdAt": "2024-01-01T00:00:00.000Z",
      "id": "id_01EHWNCE74X7JSDV0X3SZ3KJNY",
      "state": "Ready",
      "updatedAt": "2024-01-01T00:00:00.000Z",
      "url": "url_example"
    }
  }
}

query AuditLogStream {
  auditLogStream {
    auditLogTrailId
    errorMessage
    id
    lastSyncedEventId
    state
    type
  }
}

{
  "data": {
    "auditLogStream": {
      "auditLogTrailId": "auditLogTrailId_01EHWNCE74X7JSDV0X3SZ3KJNY",
      "errorMessage": "errorMessage_example",
      "id": "id_01EHWNCE74X7JSDV0X3SZ3KJNY",
      "lastSyncedEventId": "lastSyncedEventId_example",
      "state": "Active",
      "type": "AzureSentinel"
    }
  }
}