Skip to navigation

Query audit events

View as Markdown

Read persisted audit events by internal job ID or scheduler job ID with an optional attempt. A job without an attempt includes all attempts. Event filters and inclusive producer-time bounds narrow results; page size defaults to and cannot exceed 100. Cursors are opaque and must be reused with the same query.

Query parameters

heimdallJobIdstringOptional

Exact internal job identifier; exclusive with scheduler job selectors.

jobIdstringOptional

Scheduler job identifier; omitting attempt_index includes all attempts.

attemptIndexintegerOptional

Exact non-negative attempt; requires job_id. Zero is a valid attempt.

eventTypestringOptional
Stable event type to match exactly.
eventLevelstringOptional
Event level to match exactly.
eventProducerstringOptional
Producer component to match exactly.
minEventProducedAtstringOptionalformat: "int64"
Inclusive minimum producer timestamp in Unix microseconds.
maxEventProducedAtstringOptionalformat: "int64"
Inclusive maximum producer timestamp in Unix microseconds.
sortBystringOptional

Timestamp ordering: event_produced_at:asc or event_produced_at:desc.

cursorstringOptional
Opaque cursor returned for an adjacent page of the same query.
limitintegerOptional

Page size from 1 through 100; defaults to 100 when omitted.

Response

A successful response.
cursorobjectOptional
AuditEventPageCursor identifies adjacent pages without exposing storage keys.
itemslist of objectsOptional
Events matching the requested filters and ordering.