Skip to main content

Audit & Revision History API

Lumetry exposes two read-only audit surfaces:

  • contextual revision history for supported configuration resources
  • the tenant business audit log

Both require CanViewAuditLogs. Results are scoped to the active tenant, sorted newest first, and paginated. Reading either endpoint does not create another audit event.

List Resource Revisions

GET /api/revisions/{entityType}/{entityId}?page=1&pageSize=25

Supported entityType values are:

Agent, AgentEnrollmentProfile, AgentRulePack, AgentTag, AlertingIntegration, AlertingProfile, AlertingProfileIntegration, ApiToken, Collector, ExternalAlertDefinition, ExternalAlertSource, IncidentWindow, MetricDefinition, MetricEntity, MetricNodeBinding, MetricSource, PublicHoliday, Rule, RuleAlertLevel, SavedView, TopologyEdge, and TopologyNode.

Each revision includes:

  • operation: Created, Updated, or Removed
  • beforeJson and afterJson: nullable resource snapshots
  • actorUserId and actorDisplayName
  • createdAt
  • correlationId, when available

Unsupported entity types return 400 Bad Request.

List Audit Events

GET /api/audit-logs?search=&action=&entityType=&actorUserId=&from=&to=&page=1&pageSize=25

Filters:

ParameterBehavior
searchMatches action, resource type/id, or actor identity.
actionExact case-insensitive action name.
entityTypeExact case-insensitive resource type.
actorUserIdTenant user integer ID.
from / toInclusive ISO-8601 timestamp bounds.

Each event includes the action, resource type/id, nullable old/new JSON payloads, actor display name, source IP, user agent, and creation timestamp.

Both endpoints return the standard paged shape:

{
"items": [],
"page": 1,
"pageSize": 25,
"totalCount": 0,
"totalPages": 0,
"hasPreviousPage": false,
"hasNextPage": false
}