List audit log entries

Lists configuration changes made on the platform, newest first: who made each change, from where, and to which domain, user, and object. With no dates it covers the last 7 days, and it returns up to 100 entries unless you set limit.

Requires Reseller, Super User, or Super User Read Only scope. A Reseller sees only entries for domains in its own territory, in the change log and the access log alike, and naming any other domain in target-domain returns 403.

Every filter is an exact match. Dates in the request are converted to UTC from any offset; dates in the response are in UTC. Credentials in auditlog-details are shown as ********.

event-category chooses other kinds of entries: session returns sign-ins and sign-outs instead of changes, change,session returns both, and access, disclosure, or all return entries from the access log, described under GET /accesslog.

Send only the filters listed here. A query-builder key such as OR or joins, or a filter name that is not a plain field name, returns 400.

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/auditlog?datetime-start=2026-09-01T00%3A00%3A00+00%3A00&datetime-end=2026-09-02T00%3A00%3A00+00%3A00&by-ip=192.0.2.10&action-type=update&target-domain=example.com&target-object=Subscriber&target-host=core1.example.com&target-user=1002&by-client=api&by-domain=example.com&by-user=1001&auditlog-details=Support%20Line&event-category=change%2Csession&limit=undefined&start=undefined' \ --header 'Authorization: Bearer <token>'

[ { "timestamp-datetime": "2026-09-01T14:30:00+00:00", "by-domain": "example.com", "by-user": "1001", "by-client": "api", "by-ip": "192.0.2.10", "action-type": "update", "target-host": "core1.example.com", "target-domain": "example.com", "target-user": "1002", "target-object": "Subscriber", "auditlog-details": { "user": "1002", "domain": "example.com", "name-first-name": "Front", "name-last-name": "Desk" } }, { "timestamp-datetime": "2026-09-01T13:05:12+00:00", "by-domain": "example.com", "by-user": "1001", "by-client": "api", "by-ip": "192.0.2.10", "action-type": "create", "target-host": "core1.example.com", "target-domain": "example.com", "target-user": "", "target-object": "Call Queue", "auditlog-details": { "queue_name": "Support Line", "domain": "example.com" } } ]

Request

Responses