Skip to main content
Documentation

Audit API

Actions in the audit namespace of the Nexigon Hub API.

audit_QueryAuditLogEvents

POST/api/v1/actions/invoke/audit_QueryAuditLogEvents

Query the events recorded in the audit log.

Requires administrator permissions.

Request QueryAuditLogEventsAction

No fields.

Response QueryAuditLogEventsOutput

  • eventsrequired

    List of audit events.

    array<AuditLogEvent>
    AuditLogEvent
    • eventId(from event_id)required

      ID of the audit log event.

      AuditLogEventIdstring
    • actorrequired

      Actor causing the event.

      Actor
      • Anonymous

        An anonymous, unauthenticated actor.

        { "actor": "Anonymous", ...<payload fields> } β€” or "content" for non-object payloads

        AnonymousActor

        No fields.

      • System

        The system itself, typically used for internal actions.

        { "actor": "System", ...<payload fields> } β€” or "content" for non-object payloads

        SystemActor

        No fields.

      • Device

        A device authenticated via a specific deployment token.

        { "actor": "Device", ...<payload fields> } β€” or "content" for non-object payloads

        DeviceActor
        • deviceId(from device_id)required

          ID of the device.

          DeviceIdstring
        • tokenId(from token_id)required

          ID of the deployment token used for authentication.

          DeploymentTokenIdstring
      • User

        A user typically authenticated via a user session.

        { "actor": "User", ...<payload fields> } β€” or "content" for non-object payloads

        UserActor
        • userId(from user_id)required

          ID of the user.

          UserIdstring
      • UserToken

        A user authenticated via a specific token.

        { "actor": "UserToken", ...<payload fields> } β€” or "content" for non-object payloads

        UserTokenActor
        • userId(from user_id)required

          ID of the user.

          UserIdstring
        • tokenId(from token_id)required

          ID of the user token used for authentication.

          UserTokenIdstring
      • ClusterNode

        A cluster node.

        { "actor": "ClusterNode", ...<payload fields> } β€” or "content" for non-object payloads

        ClusterNodeActor
        • nodeId(from node_id)required

          ID of the cluster node.

          ClusterNodeIdstring
      • OrganizationApiToken

        An organization API token.

        { "actor": "OrganizationApiToken", ...<payload fields> } β€” or "content" for non-object payloads

        OrganizationApiTokenActor
        • organizationId(from organization_id)required

          ID of the organization.

          OrganizationIdstring
        • tokenId(from token_id)required

          ID of the API token.

          OrganizationApiTokenIdstring
    • eventrequired

      Type of the event that was recorded.

      string
    • datarequired

      Additional audit data associated with the event.

      JsonValueany
    • createdAt(from created_at)required

      Timestamp indicating when the audit log event was recorded.

      Timestampstring
    • actionoptional

      Action the event has been caused by (if any).

      AuditLogEventAction
      • actionId(from action_id)required

        ID of the action.

        AuditLogActionIdstring
    • joboptional

      Job the event has been caused by (if any).

      AuditLogEventJob
      • jobId(from job_id)required

        ID of the job.

        JobIdstring

audit_QueryAuditLogActions

POST/api/v1/actions/invoke/audit_QueryAuditLogActions

Query the actions recorded in the audit log.

Requires administrator permissions.

Request QueryAuditLogActionsAction

No fields.

Response QueryAuditLogActionsOutput

  • actionsrequired

    List of actions.

    array<AuditLogAction>
    AuditLogAction
    • actionId(from action_id)required

      ID of the audit log action.

      AuditLogActionIdstring
    • actorrequired

      Actor that performed the action.

      Actor
      • Anonymous

        An anonymous, unauthenticated actor.

        { "actor": "Anonymous", ...<payload fields> } β€” or "content" for non-object payloads

        AnonymousActor

        No fields.

      • System

        The system itself, typically used for internal actions.

        { "actor": "System", ...<payload fields> } β€” or "content" for non-object payloads

        SystemActor

        No fields.

      • Device

        A device authenticated via a specific deployment token.

        { "actor": "Device", ...<payload fields> } β€” or "content" for non-object payloads

        DeviceActor
        • deviceId(from device_id)required

          ID of the device.

          DeviceIdstring
        • tokenId(from token_id)required

          ID of the deployment token used for authentication.

          DeploymentTokenIdstring
      • User

        A user typically authenticated via a user session.

        { "actor": "User", ...<payload fields> } β€” or "content" for non-object payloads

        UserActor
        • userId(from user_id)required

          ID of the user.

          UserIdstring
      • UserToken

        A user authenticated via a specific token.

        { "actor": "UserToken", ...<payload fields> } β€” or "content" for non-object payloads

        UserTokenActor
        • userId(from user_id)required

          ID of the user.

          UserIdstring
        • tokenId(from token_id)required

          ID of the user token used for authentication.

          UserTokenIdstring
      • ClusterNode

        A cluster node.

        { "actor": "ClusterNode", ...<payload fields> } β€” or "content" for non-object payloads

        ClusterNodeActor
        • nodeId(from node_id)required

          ID of the cluster node.

          ClusterNodeIdstring
      • OrganizationApiToken

        An organization API token.

        { "actor": "OrganizationApiToken", ...<payload fields> } β€” or "content" for non-object payloads

        OrganizationApiTokenActor
        • organizationId(from organization_id)required

          ID of the organization.

          OrganizationIdstring
        • tokenId(from token_id)required

          ID of the API token.

          OrganizationApiTokenIdstring
    • actionrequired

      Type of the action that was performed.

      string
    • datarequired

      Additional audit data associated with the action.

      object<string, JsonValue>
      string
      JsonValueany
    • statusrequired

      Status associated with the action

      AuditLogActionStatus
      • Rejected

        Action got rejected (failed precondition check).

        Value: "Rejected"

      • Panicked

        Action or precondition check panicked (e.g., due to a bug).

        Value: "Panicked"

      • Succeeded

        Action was executed successfully.

        Value: "Succeeded"

      • Failed

        Action execution failed (e.g., due to missing permissions).

        Value: "Failed"

      • Pending

        Action is being executed.

        Value: "Pending"

    • createdAt(from created_at)required

      Timestamp indicating when the audit log action was recorded.

      Timestampstring