audit_logs

Creates, updates, deletes, gets or lists an audit_logs resource.

Overview

Name	audit_logs
Type	Resource
Id	cloudflare.security_center.audit_logs

Fields

The following fields are returned by SELECT queries:

list_by_account_issue

The request was successful.

Name	Datatype	Description
id	string (uuid)	UUIDv7 identifier for the audit log entry, time-ordered.
issue_id	string	The ID of the insight this audit log entry relates to.
zone_id	integer (int64)	The zone ID associated with the insight. Only present for zone-level insights.
changed_at	string (date-time)	The timestamp when the change occurred.
changed_by	string	The actor that made the change. 'system' for automated changes, or a user identifier. (example: system)
current_value	string	The value of the field after the change. Null if the field was cleared.
field_changed	string	The field that was changed. (status, user_classification)
previous_value	string	The value of the field before the change. Null if the field was not previously set.
rationale	string	Optional rationale provided for the change.

list_by_zone_issue

The request was successful.

Name	Datatype	Description
id	string (uuid)	UUIDv7 identifier for the audit log entry, time-ordered.
issue_id	string	The ID of the insight this audit log entry relates to.
zone_id	integer (int64)	The zone ID associated with the insight. Only present for zone-level insights.
changed_at	string (date-time)	The timestamp when the change occurred.
changed_by	string	The actor that made the change. 'system' for automated changes, or a user identifier. (example: system)
current_value	string	The value of the field after the change. Null if the field was cleared.
field_changed	string	The field that was changed. (status, user_classification)
previous_value	string	The value of the field before the change. Null if the field was not previously set.
rationale	string	Optional rationale provided for the change.

list_by_account

The request was successful.

Name	Datatype	Description
id	string (uuid)	UUIDv7 identifier for the audit log entry, time-ordered.
issue_id	string	The ID of the insight this audit log entry relates to.
zone_id	integer (int64)	The zone ID associated with the insight. Only present for zone-level insights.
changed_at	string (date-time)	The timestamp when the change occurred.
changed_by	string	The actor that made the change. 'system' for automated changes, or a user identifier. (example: system)
current_value	string	The value of the field after the change. Null if the field was cleared.
field_changed	string	The field that was changed. (status, user_classification)
previous_value	string	The value of the field before the change. Null if the field was not previously set.
rationale	string	Optional rationale provided for the change.

list_by_zone

The request was successful.

Name	Datatype	Description
id	string (uuid)	UUIDv7 identifier for the audit log entry, time-ordered.
issue_id	string	The ID of the insight this audit log entry relates to.
zone_id	integer (int64)	The zone ID associated with the insight. Only present for zone-level insights.
changed_at	string (date-time)	The timestamp when the change occurred.
changed_by	string	The actor that made the change. 'system' for automated changes, or a user identifier. (example: system)
current_value	string	The value of the field after the change. Null if the field was cleared.
field_changed	string	The field that was changed. (status, user_classification)
previous_value	string	The value of the field before the change. Null if the field was not previously set.
rationale	string	Optional rationale provided for the change.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_by_account_issue	select	account_id, issue_id	per_page, cursor, field_changed, changed_by, since, before, order	Lists audit log entries for a specific Security Center insight, showing changes to its status and classification over time.
list_by_zone_issue	select	zone_id, issue_id	per_page, cursor, field_changed, changed_by, since, before, order	Lists audit log entries for a specific Security Center insight, showing changes to its status and classification over time.
list_by_account	select	account_id	per_page, cursor, field_changed, changed_by, since, before, order	Lists audit log entries for all Security Center insights in the account or zone, showing changes to insight status and classification.
list_by_zone	select	zone_id	per_page, cursor, field_changed, changed_by, since, before, order	Lists audit log entries for all Security Center insights in the account or zone, showing changes to insight status and classification.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
account_id	string	The Cloudflare account ID.
issue_id	string
zone_id	string	The Cloudflare zone ID.
before	string (date-time)	Filter entries changed before this timestamp (RFC 3339).
changed_by	string	Filter by the actor that made the change.
cursor	string	Opaque cursor for pagination. Use the cursor value from result_info of the previous response.
field_changed	string	Filter by the field that was changed.
order	string	Sort order for results. Use 'asc' for oldest first or 'desc' for newest first.
per_page	integer	Number of results per page.
since	string (date-time)	Filter entries changed at or after this timestamp (RFC 3339).

SELECT examples

list_by_account_issue

Lists audit log entries for a specific Security Center insight, showing changes to its status and classification over time.

SELECT
id,
issue_id,
zone_id,
changed_at,
changed_by,
current_value,
field_changed,
previous_value,
rationale
FROM cloudflare.security_center.audit_logs
WHERE account_id = '{{ account_id }}' -- required
AND issue_id = '{{ issue_id }}' -- required
AND per_page = '{{ per_page }}'
AND cursor = '{{ cursor }}'
AND field_changed = '{{ field_changed }}'
AND changed_by = '{{ changed_by }}'
AND since = '{{ since }}'
AND before = '{{ before }}'
AND order = '{{ order }}'
;

list_by_zone_issue

Lists audit log entries for a specific Security Center insight, showing changes to its status and classification over time.

SELECT
id,
issue_id,
zone_id,
changed_at,
changed_by,
current_value,
field_changed,
previous_value,
rationale
FROM cloudflare.security_center.audit_logs
WHERE zone_id = '{{ zone_id }}' -- required
AND issue_id = '{{ issue_id }}' -- required
AND per_page = '{{ per_page }}'
AND cursor = '{{ cursor }}'
AND field_changed = '{{ field_changed }}'
AND changed_by = '{{ changed_by }}'
AND since = '{{ since }}'
AND before = '{{ before }}'
AND order = '{{ order }}'
;

list_by_account

Lists audit log entries for all Security Center insights in the account or zone, showing changes to insight status and classification.

SELECT
id,
issue_id,
zone_id,
changed_at,
changed_by,
current_value,
field_changed,
previous_value,
rationale
FROM cloudflare.security_center.audit_logs
WHERE account_id = '{{ account_id }}' -- required
AND per_page = '{{ per_page }}'
AND cursor = '{{ cursor }}'
AND field_changed = '{{ field_changed }}'
AND changed_by = '{{ changed_by }}'
AND since = '{{ since }}'
AND before = '{{ before }}'
AND order = '{{ order }}'
;

list_by_zone

Lists audit log entries for all Security Center insights in the account or zone, showing changes to insight status and classification.

SELECT
id,
issue_id,
zone_id,
changed_at,
changed_by,
current_value,
field_changed,
previous_value,
rationale
FROM cloudflare.security_center.audit_logs
WHERE zone_id = '{{ zone_id }}' -- required
AND per_page = '{{ per_page }}'
AND cursor = '{{ cursor }}'
AND field_changed = '{{ field_changed }}'
AND changed_by = '{{ changed_by }}'
AND since = '{{ since }}'
AND before = '{{ before }}'
AND order = '{{ order }}'
;