Skip to content

List audit events across the organization filtered by time range and type

Request

Returns a paginated list of audit events (node connects/disconnects, config changes, certificate warnings, order updates, etc.) within a time window. Supports filtering by node, event type, level, and item type. Use sTime/eTime for the time range (ISO 8601).

Requires events::read permission.

Security
JWTAuthorizer
Query
sTimestring

ISO 8601 datetime string for the start of the range (e.g. 2025-01-01T05:00:00.000Z)

eTimestring

ISO 8601 datetime string for the end of the range (e.g. 2025-01-01T05:00:00.000Z)

nodeIDsArray of strings

Node IDs to filter events for (optional)

eventTypesArray of strings

Event type(s) filter (optional)

levelsArray of strings

Event level(s) filter (optional)

Items Enum:"INFO""WARNING""ERROR""CRITICAL"
itemTypesArray of strings

Item Type(s) filter (optional)

Items Enum:"Node""Certificate""Order""Upgrade""AlertSuppression"
limitnumber

Maximum number of results to return

pagestring

Page of results to return

sortstring

Sort results, like level:desc or eventType:asc

qstring

Full text search of events

curl -i -X GET \
  'https://apidocs.trustgrid.io/_mock/v2/event?sTime=string&eTime=string&nodeIDs=string&eventTypes=string&levels=INFO&itemTypes=Node&limit=0&page=string&sort=string&q=string' \
  -H 'Authorization: Bearer <YOUR_JWT_HERE>'

Responses

OK

Headers
x-total-countnumber

Total number of filtered events

Bodyapplication/json
Array [
levelstring

Event log level

Enum:"INFO""WARNING""ERROR""CRITICAL"
Example:"ERROR"
messagestring

Event message

Example:"Node Disconnected"
timestampinteger

Unix epoch timestamp (seconds) when the event was generated

Example:1775196846
receivedTimeinteger

Unix epoch timestamp (seconds) when the control plane received the event

Example:1775196846
subjectstring

Event item type

Enum:"Node""Certificate""Order""Upgrade""AlertSuppression"
Example:"Node"
eventTypestring

Event type

Example:"Node Connect"
orgIdstring

Org ID

Example:"0000000-0000-0000-0000-000000000001"
uidstring

Event ID

Example:"32Nt3pyfAJisyUADctXZW6bcwJC"
nodeIdstring

Node ID (if applicable)

Example:"0000000-0000-0000-0000-000000000002"
nodeNamestring

Node name (if applicable)

Example:"test"
domainstring

Domain name (if applicable)

Example:"Domain"
fqdnstring

FQDN (if applicable)

Example:"test.dev.io"
orderIdstring

Order ID (if applicable)

Example:"32Nt3pyfAJisyUADctXZW6bcwJD"
detailsobject

Metadata associated to the event. Shape varies by eventType. Values may be strings, numbers, or nested objects.

statestring

Event state (if applicable)

Enum:"EXCEEDED""CLEARED""UNKNOWN"
Example:"EXCEEDED"
]
Response
[
  {
    "level": "ERROR",
    "message": "Node Disconnected",
    "timestamp": 1775196846,
    "receivedTime": 1775196846,
    "subject": "Node",
    "eventType": "Node Connect",
    "orgId": "0000000-0000-0000-0000-000000000001",
    "uid": "32Nt3pyfAJisyUADctXZW6bcwJC",
    "nodeId": "0000000-0000-0000-0000-000000000002",
    "nodeName": "test",
    "domain": "Domain",
    "fqdn": "test.dev.io",
    "orderId": "32Nt3pyfAJisyUADctXZW6bcwJD",
    "details": { … },
    "state": "EXCEEDED"
  }
]