> ## Documentation Index
> Fetch the complete documentation index at: https://docs.notifuse.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get an audit log entry

> Returns one entry by id. In workspace scope an entry of another workspace is a 404, never a leak.




## OpenAPI

````yaml /openapi.json get /api/auditLogs.get
openapi: 3.0.3
info:
  title: Notifuse API
  description: API for Notifuse - a transactional email and newsletter management platform
  version: 1.0.0
  contact:
    name: Notifuse Support
    url: https://www.notifuse.com/support
    email: hello@notifuse.com
  license:
    name: BUSL-1.1
    url: https://github.com/Notifuse/notifuse/blob/main/LICENSE
servers:
  - url: https://{notifuseDomain}
    description: Customer-specific Notifuse API server
    variables:
      notifuseDomain:
        description: Your unique Notifuse domain
        default: demo.notifuse.com
security: []
paths:
  /api/auditLogs.get:
    get:
      tags:
        - Audit logs
      summary: Get an audit log entry
      description: >
        Returns one entry by id. In workspace scope an entry of another
        workspace is a 404, never a leak.
      operationId: getAuditLog
      parameters:
        - name: id
          in: query
          required: true
          schema:
            type: string
        - name: scope
          in: query
          required: false
          schema:
            type: string
            enum:
              - workspace
              - deployment
            default: workspace
        - name: workspace_id
          in: query
          required: false
          schema:
            type: string
          description: Required in workspace scope.
      responses:
        '200':
          description: The entry
          content:
            application/json:
              schema:
                type: object
                properties:
                  log:
                    $ref: '#/components/schemas/AuditLog'
        '403':
          description: Not allowed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: No such entry in this scope
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - BearerAuth: []
components:
  schemas:
    AuditLog:
      type: object
      description: >-
        One recorded control-plane action. workspace_id is absent for
        deployment-level entries (sign-ins, the licence, the system settings).
      properties:
        id:
          type: string
          example: 8b8dd285f6874c17b5edcb39ef3e0b8b
        occurred_at:
          type: string
          format: date-time
        workspace_id:
          type: string
          example: ws_1234567890
        action:
          type: string
          description: The RPC route that performed the action, verbatim.
          example: workspaces.inviteMember
        category:
          type: string
          example: members
        outcome:
          type: string
          enum:
            - success
            - failure
            - denied
        status_code:
          type: integer
          example: 200
        actor_type:
          type: string
          enum:
            - user
            - api_key
            - system
            - anonymous
        actor_id:
          type: string
        actor_email:
          type: string
        actor_name:
          type: string
        actor_role:
          type: string
          enum:
            - owner
            - member
            - root
        auth_method:
          type: string
          enum:
            - session
            - api_key
            - magic_code
            - sso
            - root_password
        target_type:
          type: string
          example: invitation
        target_id:
          type: string
        target_name:
          type: string
          example: bob@example.com
        ip_address:
          type: string
          example: 203.0.113.9
        user_agent:
          type: string
        request_id:
          type: string
          description: Echoed on every API response as X-Request-ID.
        changes:
          type: object
          additionalProperties:
            $ref: '#/components/schemas/AuditChange'
        metadata:
          type: object
          additionalProperties: true
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
          description: Error message
      required:
        - error
    AuditChange:
      type: object
      description: >-
        One field's before and after. Secrets are replaced by "[redacted]" on
        both sides.
      properties:
        old:
          description: The value before the action
        new:
          description: The value after the action
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: API token for authentication

````