Query and aggregate audit logs. Admin role with auditView privilege required.
Bearer token authentication. Supports two token types:
POST /v1/auth/loginPOST /v1/api-tokens, format: cmnd_<tokenId>.<secret>Maximum number of records to return
Offset for pagination
Filter by event category
Filter by action type
Filter by severity level
Start date filter
End date filter
Filter by user ID
Field to aggregate results by