The query payload defines the criteria used to query audit log records. It consists of a mandatory filter expression and an optional result limit, allowing clients to precisely select audit events based on structured conditions.
Queries are evaluated asynchronously. A valid query payload that passes validation will be accepted and executed, even if it later results in no matching records.