Audit Logs - OnlineOrNot API Documentation

GET/v1/audit_logs

List audit log events

Retrieve a paginated list of audit log events for your organisation

Requires PEOPLE:READ; EDIT also grants READ. Session cookies are accepted only when no bearer credential is supplied.

Security: Bearer Auth

Provide your bearer token in the Authorization header when making requests to protected resources.

Example: Authorization: Bearer 123

Header parameters

X-OnlineOrNot-Organisation:stringoptional

Public organization ID to select from an OAuth grant. Required for grants authorizing multiple organizations. Omit for single-organization grants and API tokens.

Query parameters

page:integeroptional

Page number of paginated results, starting at 1.

Default: 1

per_page:integeroptional

Number of items per page. Defaults to 20. Continue requesting subsequent pages until the accumulated item count reaches result_info.total_count or a page is empty.

Default: 20

search:stringoptional

Search term to filter results.

Responses

Status	Meaning	Description
200	OK	Returns a paginated list of audit log events
400	Bad Request	Invalid request
401	Unauthorized	Unauthenticated
403	Forbidden	Insufficient permissions
500	Internal Server Error	Internal Server Error

Response Schema

result:object[]

result_info:object

success:boolean

Whether the API call was successful

errors:object[]

messages:object[]

Request

GET

/v1/audit_logs

curl --request GET \
  --url https://api.onlineornot.com/v1/audit_logs \
  --header 'Accept: application/json' \
  --header 'Authorization: Bearer {access-token}' \
  --header 'X-OnlineOrNot-Organisation: string'

Response

{
  "result": [
    {
      "id": "a6uatzrn2k3l",
      "type": "AuditLogEvent",
      "actor_id": "user_123",
      "actor_type": "User",
      "actor_display_name": "max@onlineornot.com",
      "auditable_id": "abc123",
      "auditable_type": "Check",
      "auditable_display_name": "My Website Check",
      "target_id": "1",
      "target_type": "Organisation",
      "target_display_name": "string",
      "audit_action": "check.created",
      "action": "created",
      "location": "Sydney, NSW, AU",
      "remote_ip": "91.169.182.144",
      "created_at": "2026-02-17T10:58:07.000Z",
      "metadata": {
        "property1": null,
        "property2": null
      }
    }
  ],
  "result_info": {
    "page": 1,
    "per_page": 20,
    "count": 1,
    "total_count": 1
  },
  "success": true,
  "errors": [],
  "messages": []
}