Results and examples describe how audit query results are returned, including time formatting, sorting behavior, and sample outputs.
Result format
The results combine the year month day fields into the time field.
Sorting behavior
The results are automatically sorted by the time field in Ascending order.
Audit query results example
"fjwazvgrmyk5kz3v","2026-04-01T12:51:47.059242963Z","Success","Service","Unknown","Identity","Get groups","GET","API","/internal/v1/groups?workspaceId=fjwazvgrmyk5kz3v&limit=25&offset=0","/internal/v1/groups","8c74f136399efda7df631bf17aaa1fba","b026165f23bea2a0"
"fjwazvgrmyk5kz3v","2026-04-01T12:51:47.055668496Z","Success","Service","Unknown","Authentication","JWT validation success","JWTValidation","API","/internal/v1/groups?workspaceId=fjwazvgrmyk5kz3v&limit=25&offset=0","/internal/v1/groups?workspaceId=fjwazvgrmyk5kz3v&limit=25&offset=0","8c74f136399efda7df631bf17aaa1fba","b026165f23bea2a0"
Sample query
{
"filters": {
"and": [
{
"field": "what.category",
"operator": "eq",
"value": "Identity"
},
{
"field": "outcome",
"operator": "neq",
"value": "success"
},
{
"or": [
{
"field": "month",
"operator": "in",
"value": [1, 3]
},
{
"field": "day",
"operator": "gt",
"value": 10
}
]
},
{
"field": "year",
"operator": "eq",
"value": 2026
}
]
},
"limit": 500
}