--- title: Get account audit logs --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Audit Logs](https://developers.cloudflare.com/api/go/resources/audit_logs) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Get account audit logs client.AuditLogs.List(ctx, params) (\*V4PagePaginationArray\[[AuditLog]()], error) GET/accounts/{account\_id}/audit\_logs Gets a list of audit logs for an account. Can be filtered by who made the change, on which zone, and the timeframe of the change. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `Account Settings Write``Account Settings Read` ##### ParametersExpand Collapse
params AuditLogListParams AccountID param.Field\[string] Path param: Identifier maxLength32 Link to this property ID param.Field\[string]Optional Query param: Finds a specific log by its ID. Link to this property
Action param.Field\[AuditLogListParamsAction]Optional Query param Type stringOptional Filters by the action type. Link to this property
Link to this property
Actor param.Field\[AuditLogListParamsActor]Optional Query param Email stringOptional Filters by the email address of the actor that made the change. formatemail Link to this property IP stringOptional Filters by the IP address of the request that made the change by specific IP address or valid CIDR Range. Link to this property
Link to this property
Before param.Field\[AuditLogListParamsBeforeUnion]Optional Query param: Limits the returned results to logs older than the specified date. A full-date that conforms to RFC3339. UnionTime Link to this property UnionTime Link to this property
Link to this property
Direction param.Field\[AuditLogListParamsDirection]Optional Query param: Changes the direction of the chronological sorting. const AuditLogListParamsDirectionDesc AuditLogListParamsDirection = "desc" Link to this property const AuditLogListParamsDirectionAsc AuditLogListParamsDirection = "asc" Link to this property
Link to this property Export param.Field\[bool]Optional Query param: Indicates that this request is an export of logs in CSV format. Link to this property HideUserLogs param.Field\[bool]Optional Query param: Indicates whether or not to hide user level audit logs. Link to this property Page param.Field\[float64]Optional Query param: Defines which page of results to return. minimum1 Link to this property PerPage param.Field\[float64]Optional Query param: Sets the number of results to return per page. maximum1000 minimum1 Link to this property
Since param.Field\[AuditLogListParamsSinceUnion]Optional Query param: Limits the returned results to logs newer than the specified date. A full-date that conforms to RFC3339. UnionTime Link to this property UnionTime Link to this property
Link to this property
Zone param.Field\[AuditLogListParamsZone]Optional Query param Name stringOptional Filters by the name of the zone associated to the change. Link to this property
Link to this property
[Link to this property](<#(resource)%20audit_logs%20%3E%20(method)%20list%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type AuditLog struct{…} ID stringOptional A string that uniquely identifies the audit log. Link to this property
Action AuditLogActionOptional Result boolOptional A boolean that indicates if the action attempted was successful. Link to this property Type stringOptional A short string that describes the action that was performed. Link to this property
Link to this property
Actor AuditLogActorOptional ID stringOptional The ID of the actor that performed the action. If a user performed the action, this will be their User ID. Link to this property Email stringOptional The email of the user that performed the action. formatemail Link to this property IP stringOptional The IP address of the request that performed the action. Link to this property
Type AuditLogActorTypeOptional The type of actor, whether a User, Cloudflare Admin, or an Automated System. One of the following: const AuditLogActorTypeUser AuditLogActorType = "user" Link to this property const AuditLogActorTypeAdmin AuditLogActorType = "admin" Link to this property const AuditLogActorTypeCloudflare AuditLogActorType = "Cloudflare" Link to this property
Link to this property
Link to this property Interface stringOptional The source of the event. Link to this property Metadata unknownOptional An object which can lend more context to the action being logged. This is a flexible value and varies between different actions. Link to this property NewValue stringOptional The new value of the resource that was modified. Link to this property OldValue stringOptional The value of the resource before it was modified. Link to this property
Owner AuditLogOwnerOptional ID stringOptional Identifier maxLength32 Link to this property
Link to this property
Resource AuditLogResourceOptional ID stringOptional An identifier for the resource that was affected by the action. Link to this property Type stringOptional A short string that describes the resource that was affected by the action. Link to this property
Link to this property When TimeOptional A UTC RFC3339 timestamp that specifies when the action being logged occured. formatdate-time Link to this property
[Link to this property](<#(resource)%20%24shared%20%3E%20(model)%20audit_log%20%3E%20(schema)>) ### Get account audit logs Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/audit_logs" "github.com/cloudflare/cloudflare-go/option" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) page, err := client.AuditLogs.List(context.TODO(), audit_logs.AuditLogListParams{ AccountID: cloudflare.F("023e105f4ecef8ad9ca31a8372d0c353"), }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", page) } ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "id": "d5b0f326-1232-4452-8858-1089bd7168ef", "action": { "result": true, "type": "change_setting" }, "actor": { "id": "f6b5de0326bb5182b8a4840ee01ec774", "email": "michelle@example.com", "ip": "198.41.129.166", "type": "user" }, "interface": "API", "metadata": { "name": "security_level", "type": "firewall", "value": "high", "zone_name": "example.com" }, "newValue": "low", "oldValue": "high", "owner": { "id": "023e105f4ecef8ad9ca31a8372d0c353" }, "resource": { "id": "023e105f4ecef8ad9ca31a8372d0c353", "type": "zone" }, "when": "2017-04-26T17:31:07Z" } ], "success": true } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": [ { "id": "d5b0f326-1232-4452-8858-1089bd7168ef", "action": { "result": true, "type": "change_setting" }, "actor": { "id": "f6b5de0326bb5182b8a4840ee01ec774", "email": "michelle@example.com", "ip": "198.41.129.166", "type": "user" }, "interface": "API", "metadata": { "name": "security_level", "type": "firewall", "value": "high", "zone_name": "example.com" }, "newValue": "low", "oldValue": "high", "owner": { "id": "023e105f4ecef8ad9ca31a8372d0c353" }, "resource": { "id": "023e105f4ecef8ad9ca31a8372d0c353", "type": "zone" }, "when": "2017-04-26T17:31:07Z" } ], "success": true } ```