Audit Logs - co-mind.ai

The co-mind.ai platform maintains comprehensive audit logs for all API activity. Use audit logs for compliance reporting, security monitoring, and usage analysis.

Audit log access requires JWT authentication with Admin role and the auditView privilege.

Endpoint

Endpoint	Method	Auth	Purpose
`/v1/admin/audit-logs`	GET	Admin (JWT)	Query audit logs with filters and aggregation

Query Audit Logs

curl "https://your-instance/v1/admin/audit-logs?start=2025-01-01T00:00:00Z&end=2025-01-31T23:59:59Z&limit=100" \
  -H "Authorization: Bearer $JWT"

Filtering

Audit logs support rich filtering to narrow down results:

Parameter	Type	Description
`start`	ISO 8601 datetime	Start of the time range
`end`	ISO 8601 datetime	End of the time range
`user_id`	string	Filter by specific user
`action`	string	Filter by action type (e.g., `chat.completion`, `auth.login`)
`resource`	string	Filter by resource type
`status`	string	Filter by status (`success`, `error`)
`limit`	integer	Maximum results to return (default: 50)
`offset`	integer	Pagination offset

Filter by User

curl "https://your-instance/v1/admin/audit-logs?user_id=user_abc123&limit=50" \
  -H "Authorization: Bearer $JWT"

Filter by Action

curl "https://your-instance/v1/admin/audit-logs?action=auth.login&status=error&limit=100" \
  -H "Authorization: Bearer $JWT"

Use Cases

Compliance Reporting

Generate reports showing who accessed what data, when, and from where.

Security Monitoring

Track failed login attempts, unusual API patterns, and token usage.

Usage Analytics

Analyze API usage by endpoint, user, model, and time period.

Incident Investigation

Trace specific requests and responses during security incidents.

Common Queries

All chat completions by a specific user

curl "https://your-instance/v1/admin/audit-logs?user_id=user_abc123&action=chat.completion" \
  -H "Authorization: Bearer $JWT"

Token creation and revocation events

curl "https://your-instance/v1/admin/audit-logs?action=api-token.create&limit=100" \
  -H "Authorization: Bearer $JWT"

curl "https://your-instance/v1/admin/audit-logs?action=api-token.revoke&limit=100" \
  -H "Authorization: Bearer $JWT"

​Endpoint

​Query Audit Logs

​Filtering

​Filter by User

​Filter by Action

​Use Cases

Compliance Reporting

Security Monitoring

Usage Analytics

Incident Investigation

​Common Queries

Endpoint

Query Audit Logs

Filtering

Filter by User

Filter by Action

Use Cases

Common Queries