Audit Logs

Skailer writes audit log records for changes, data exports and denied access. The log is read with one method.

Search audit logs

POST /api/v1/audit-logs/search

Requires permission audit_log_read=view.

Field	Type	Description
datetime_from, datetime_to	string (datetime)	Period of the records
action_types	array[string]	created, updated, deleted, archived, merged, background_process, data_exported, read, unauthorized, access_denied, impersonation_started, impersonation_ended
object_types	array[string]	Object types, for example employee, applicant, document; the full list is in the API reference
object_id	integer	Records of one object
employee_ids	array[integer]	Records made by these employees
is_system	boolean	true - only records made by the system, false - only by people
include_details	boolean	Return details - the payload of the change. Default false
page_number	integer	Page number, starts at 1. The page size is fixed at 20

Each record returns:

Field	Description
id	Record ID
datetime_created_at	When the action happened
action_type, details_type	What happened
object_type, object_id	Which object it happened to
employee_id	Who did it; null for system actions
is_system	The action was made by the system
details	Payload of the change, only with include_details=true
impersonator_employee_id	Set when an organization admin acted while signed in as the employee