List Logs
Query over every log generated by PlusAuth belongs to your tenant.
DateMath Reference :
If you are familiar with Elasticsearch, Kibana, or Grafana date math queries, PlusAuth follows the same concepts. A date math expression starts with an anchor date, which can be either now or a date string ending with ||. The anchor date can optionally be followed by one or more math expressions:
+1h: Add one hour-1d: Subtract one day/d: Round down to the nearest day The supported units are:
| Time Unit | Duration |
|---|---|
y | Years |
M | Months |
w | Weeks |
d | Days |
h | Hours |
H | Hours |
m | Minutes |
s | Seconds |
Assuming now is 2001-01-01 12:00:00, some examples are:
| Expression | Description | Resolves To |
|---|---|---|
now+1h | now in milliseconds plus one hour | 2001-01-01 13:00:00 |
now-1h | now in milliseconds minus one hour | 2001-01-01 11:00:00 |
now-1h/d | now in milliseconds minus one hour, rounded down to UTC 00:00 | 2001-01-01 00:00:00 |
Query Parameters
Filter logs occurred after this date. This can be a datetime string or date math expression.
Page number of records you wish to skip before selecting records. Final skipped records count would be limit * offset.
Retrieve logs belongs to one or more operation. Comma separated. Ex.: authorization.error,create.user
Additional query in PlusAuth Query Language format.
Filter logs occurred until this date. This can be a datetime string or date math expression.
Response Body Schema
lengthnumberZorunlu
The number of log entries returned in the current response.
limitnumberZorunlu
The maximum number of log entries returned in a single response.
offsetnumberZorunlu
The page offset used for pagination. This value determines how many pages of results are skipped before returning logs.
totalnumberZorunlu
An estimated total number of log entries that match the query conditions, ignoring pagination.
intervalnumber
The duration of each aggregation bucket, expressed in milliseconds, used to group log data over the selected time range. Returned only for the first page (offset = 0)
logsarray<object>
The list of log entries matching the query conditions for the requested page. Ordered by time in descending order (newest first).
logs. client_addressstringZorunlu
IP address of the client that initiated the request
logs. event_typestringZorunlu
Numeric code identifying the specific type of event that occurred
logs. levelstringZorunlu
Log level indicating the severity of the event
logs. messagestringZorunlu
Human-readable message describing the event (may be empty)
logs. request_idstringZorunlu
UUID identifying the specific request that generated this log entry
logs. timestringZorunlu
Timestamp when the log event occurred in ISO format
logs. user_idstringZorunlu
Unique identifier for the user associated with this event
logs. detailsobjectZorunlu
Additional details specific to the log event
stackedarray<object>
Aggregated log counts grouped by time interval and log level, intended for building stacked or time-series visualizations. Returned only for the first page (offset = 0)
stacked. countnumberZorunlu
The number of log entries that fall into this interval and severity level.
stacked. intervalstringZorunlu
The start time of the aggregation interval this data point represents.
stacked. levelstringZorunlu
The log severity level associated with this aggregation bucket.