Skip to main content
GET
/
v1
/
audit-events
/
{event_id}
Retrieve an Audit Event
curl --request GET \
  --url https://tracer.lerian.io/v1/audit-events/{event_id} \
  --header 'Content-Type: <content-type>' \
  --header 'X-API-Key: <x-api-key>'
{
"eventId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"eventType": "TRANSACTION_VALIDATED",
"resourceType": "transaction",
"resourceId": "<string>",
"action": "<string>",
"result": "<string>",
"actor": {
"id": "<string>",
"actorType": "user",
"name": "<string>",
"role": "<string>",
"ipAddress": "<string>"
},
"context": {},
"metadata": {},
"hash": "<string>",
"previousHash": "<string>",
"createdAt": "2023-11-07T05:31:56Z"
}

Headers

Content-Type
string
required

The type of media of the resource. Must be application/json.

X-API-Key
string
required

The API Key for authentication. This header is required for all endpoints except health checks.

X-Request-Id
string<uuid>

A unique identifier used to trace and track each request.

Path Parameters

event_id
string<uuid>
required

The unique identifier of the audit event that you want to retrieve or verify.

Response

Indicates that the request was successful and the response contains the expected data.

Audit trail event for SOX/GLBA compliance.

eventId
string<uuid>

Unique identifier for the audit event.

eventType
enum<string>

Type of event that occurred.

Available options:
TRANSACTION_VALIDATED,
RULE_CREATED,
RULE_UPDATED,
RULE_ACTIVATED,
RULE_DEACTIVATED,
RULE_DELETED,
LIMIT_CREATED,
LIMIT_UPDATED,
LIMIT_ACTIVATED,
LIMIT_DEACTIVATED,
LIMIT_DELETED
resourceType
enum<string>

Type of resource affected by the event.

Available options:
transaction,
rule,
limit
resourceId
string

ID of the affected resource.

action
string

Action performed (VALIDATE, CREATE, UPDATE, DELETE, ACTIVATE, DEACTIVATE).

result
string

Result of the action. For validations (ALLOW, DENY, REVIEW). For CRUD operations (SUCCESS, FAILED).

actor
object

Actor who performed the action.

context
object

Event context. For validations includes request and response. For CRUD includes before and after states.

metadata
object

Additional info (ticketId, correlationId, etc.).

hash
string

SHA-256 hash of event content for tamper detection.

previousHash
string

Hash of previous event in chain (forms immutable chain).

createdAt
string<date-time>

When the event occurred.