Skip to main content

Audit Logs

This category lists the 1 Runtime system commands under system.audit-log..

1. List audit logs​

Full name: system.audit-log.list

List audit log records. This tenant-scoped Runtime command validates its input against the registered command schema. · Risk: Read

sl system audit-log list \
  [--keyword value] [--module-key value] [--status succeeded|failed] \
  [--from iso --to iso] [--cursor value] [--limit n] [--json]

Parameters:

  • keyword（optional）— Case-insensitive search over log ID, action, operation, resource, actor, session, IP, and user agent
  • moduleKey（optional）— One of auth, form_management, ai_conversation, business_data, message_template, visualization, automation_task, role_permission, space_resource, open_link, department_management, application, or soln_studio
  • status（optional）— Audit result: succeeded or failed
  • occurredAtFrom|occurredAtTo（optional）— Offset-aware ISO-8601 timestamps for a range of at most 90 days. They must be provided together; omit both only on the first page to query the default recent 30-day range
  • cursor（optional）— Opaque nextCursor returned by the previous page. When set, occurredAtFrom and occurredAtTo are required and must equal the previous response timeRange.from and timeRange.to
  • limit（optional）— Number of records, 1-100; defaults to 20