--- title: Logs --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/typescript) [Organizations](https://developers.cloudflare.com/api/typescript/resources/organizations) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Logs #### LogsAudit ##### [Get organization audit logs (Version 2)](https://developers.cloudflare.com/api/typescript/resources/organizations/subresources/logs/subresources/audit/methods/list) client.organizations.logs.audit.list(stringorganizationID, AuditListParams {before, since, id, 20 more } query, RequestOptionsoptions?): CursorPaginationAfter< [AuditListResponse]() {id, action, actor, 3 more } > GET/organizations/{organization\_id}/logs/audit ##### [Get resource change history from an organization audit log entry (Version 2)](https://developers.cloudflare.com/api/typescript/resources/organizations/subresources/logs/subresources/audit/methods/history) client.organizations.logs.audit.history(stringid, AuditHistoryParams {organization\_id, action\_time, before, 4 more } params, RequestOptionsoptions?): [AuditHistoryResponse]() {id, action, actor, 3 more } GET/organizations/{organization\_id}/logs/audit/{id}/history ##### ModelsExpand Collapse
AuditListResponse {id, action, actor, 3 more } id?: string A unique identifier for the audit log entry. maxLength32 Link to this property
action?: Action {description, result, time, type } Provides information about the action performed. description?: string A short description of the action performed. Link to this property result?: string The result of the action, indicating success or failure. Link to this property time?: string A timestamp indicating when the action was logged. formatdate-time Link to this property type?: string A short string that describes the action that was performed. Link to this property
Link to this property
actor?: Actor {id, context, email, 4 more } Provides details about the actor who performed the action. id?: string The ID of the actor who performed the action. If a user performed the action, this will be their User ID. Link to this property
context?: "api"| "api\_key"| "api\_token"| 3 more The context in which the action was initiated. - api: The action was performed through the API. The specific credential type was not recorded. - api_key: The action was authenticated with a Cloudflare Global API Key. - api_token: The action was authenticated with an API token. - dash: The action was performed through the Cloudflare dashboard. - oauth: The action was authenticated with an OAuth token. - origin_ca_key: The action was authenticated with an Origin CA key. One of the following: "api" Link to this property "api\_key" Link to this property "api\_token" Link to this property "dash" Link to this property "oauth" Link to this property "origin\_ca\_key" Link to this property
Link to this property email?: string The email of the actor who performed the action. formatemail Link to this property ip\_address?: string The IP address of the request that performed the action. Link to this property token\_id?: string The API token ID when the actor context is an api\_token or oauth. Link to this property token\_name?: string The API token name when the actor context is an api\_token or oauth. Link to this property
type?: "cloudflare\_admin"| "system"| "user" The type of actor. One of the following: "cloudflare\_admin" Link to this property "system" Link to this property "user" Link to this property
Link to this property
Link to this property
organization?: Organization {id } Contains organization related information. id?: string A unique identifier for the organization. Link to this property
Link to this property
raw?: Raw {cf\_ray\_id, method, status\_code, 2 more } Provides raw information about the request and response. cf\_ray\_id?: string The Cloudflare Ray ID for the request. Link to this property method?: string The HTTP method of the request. Link to this property status\_code?: number The HTTP response status code returned by the API. Link to this property uri?: string The URI of the request. Link to this property user\_agent?: string The client’s user agent string sent with the request. Link to this property
Link to this property
resource?: Resource {id, product, request, 3 more } Provides details about the affected resource. id?: string The unique identifier for the affected resource. Link to this property product?: string The Cloudflare product associated with the resource. Link to this property request?: unknown Link to this property response?: unknown Link to this property scope?: unknown The scope of the resource. Link to this property type?: string The type of the resource. Link to this property
Link to this property
[Link to this property](<#(resource)%20organizations.logs.audit%20%3E%20(model)%20audit_list_response%20%3E%20(schema)>)
AuditHistoryResponse = Array<AuditHistoryResponseItem> id?: string A unique identifier for the audit log entry. maxLength32 Link to this property
action?: Action {description, result, time, type } Provides information about the action performed. description?: string A short description of the action performed. Link to this property result?: string The result of the action, indicating success or failure. Link to this property time?: string A timestamp indicating when the action was logged. formatdate-time Link to this property type?: string A short string that describes the action that was performed. Link to this property
Link to this property
actor?: Actor {id, context, email, 4 more } Provides details about the actor who performed the action. id?: string The ID of the actor who performed the action. If a user performed the action, this will be their User ID. Link to this property
context?: "api"| "api\_key"| "api\_token"| 3 more The context in which the action was initiated. - api: The action was performed through the API. The specific credential type was not recorded. - api_key: The action was authenticated with a Cloudflare Global API Key. - api_token: The action was authenticated with an API token. - dash: The action was performed through the Cloudflare dashboard. - oauth: The action was authenticated with an OAuth token. - origin_ca_key: The action was authenticated with an Origin CA key. One of the following: "api" Link to this property "api\_key" Link to this property "api\_token" Link to this property "dash" Link to this property "oauth" Link to this property "origin\_ca\_key" Link to this property
Link to this property email?: string The email of the actor who performed the action. formatemail Link to this property ip\_address?: string The IP address of the request that performed the action. Link to this property token\_id?: string The API token ID when the actor context is an api\_token or oauth. Link to this property token\_name?: string The API token name when the actor context is an api\_token or oauth. Link to this property
type?: "cloudflare\_admin"| "system"| "user" The type of actor. One of the following: "cloudflare\_admin" Link to this property "system" Link to this property "user" Link to this property
Link to this property
Link to this property
organization?: Organization {id } Contains organization related information. id?: string A unique identifier for the organization. Link to this property
Link to this property
raw?: Raw {cf\_ray\_id, method, status\_code, 2 more } Provides raw information about the request and response. cf\_ray\_id?: string The Cloudflare Ray ID for the request. Link to this property method?: string The HTTP method of the request. Link to this property status\_code?: number The HTTP response status code returned by the API. Link to this property uri?: string The URI of the request. Link to this property user\_agent?: string The client’s user agent string sent with the request. Link to this property
Link to this property
resource?: Resource {id, product, request, 3 more } Provides details about the affected resource. id?: string The unique identifier for the affected resource. Link to this property product?: string The Cloudflare product associated with the resource. Link to this property request?: unknown Link to this property response?: unknown Link to this property scope?: unknown The scope of the resource. Link to this property type?: string The type of the resource. Link to this property
Link to this property
[Link to this property](<#(resource)%20organizations.logs.audit%20%3E%20(model)%20audit_history_response%20%3E%20(schema)>)