> ## Documentation Index > Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt > Use this file to discover all available pages before exploring further. # Retrieve an Audit Event > Use this endpoint to retrieve a single audit event by its unique identifier. Designed for SOX/GLBA compliance. ## OpenAPI ````yaml en/openapi/v3-current/tracer.yaml get /v1/audit-events/{id} openapi: 3.1.0 info: title: Tracer API description: >- Complete API reference for Tracer services including transaction validation, rules management, spending limits, and audit events for SOX/GLBA compliance. version: 1.0.1 servers: - url: https://tracer.sandbox.lerian.net security: - ApiKeyAuth: [] - BearerAuth: [] tags: - name: Health API description: >- Health check endpoints for liveness and readiness probes. These endpoints do not require authentication. - name: Validations API description: >- Transaction validation endpoints. Performance target is under 80ms (p99). Validations are idempotent by `requestId` — a duplicate request returns the cached result with HTTP 200, while a new request returns HTTP 201. No idempotency header is required. - name: Rules API description: >- Validation rule management endpoints. Rules use CEL (Common Expression Language) expressions. - name: Limits API description: >- Spending limit management endpoints. Limits control transaction amounts by scope and period. - name: Reservations API description: >- Two-phase transaction-capacity reservation endpoints. A reserve holds capacity against spending limits; a confirm commits it and a release returns it. Confirm and release are idempotent. - name: Audit Events API description: >- Audit trail endpoints for SOX/GLBA compliance. All validation decisions and configuration changes are recorded. paths: /v1/audit-events/{id}: get: tags: - Audit Events API summary: Retrieve an Audit Event description: >- Use this endpoint to retrieve a single audit event by its unique identifier. Designed for SOX/GLBA compliance. operationId: getAuditEvent parameters: - $ref: '#/components/parameters/AuditEventId' - $ref: '#/components/parameters/ContentType' - $ref: '#/components/parameters/XApiKey' - $ref: '#/components/parameters/XRequestId' responses: '200': description: >- Indicates that the request was successful and the response contains the expected data. content: application/json: schema: $ref: '#/components/schemas/AuditEvent' '400': description: '' content: application/json: schema: $ref: '#/components/schemas/ErrorFormat' examples: Error0007: $ref: '#/components/examples/Error0007' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ErrorFormat' examples: ErrorUnauthenticated: $ref: '#/components/examples/ErrorUnauthenticated' '404': description: '' content: application/json: schema: $ref: '#/components/schemas/ErrorFormat' examples: Error0140: $ref: '#/components/examples/Error0140' '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ErrorFormat' examples: Error0004: $ref: '#/components/examples/Error0004' components: parameters: AuditEventId: name: id in: path description: >- The unique identifier of the audit event that you want to retrieve or verify. required: true example: 019c96a0-10d2-7134-ba5f-664142ee7052 schema: type: string format: uuid ContentType: name: Content-Type in: header description: The type of media of the resource. Must be `application/json`. required: true example: application/json schema: type: string XApiKey: name: X-API-Key in: header description: >- The API Key for authentication. **This header is required for all endpoints except health checks**. required: true schema: type: string XRequestId: name: X-Request-Id in: header description: A unique identifier used to trace and track each request. required: false example: 019c96a0-10ce-75fc-a273-dc799079a99c schema: type: string format: uuid schemas: AuditEvent: type: object description: Audit trail event for SOX/GLBA compliance. properties: eventId: type: string format: uuid description: Unique identifier for the audit event. eventType: type: string enum: - TRANSACTION_VALIDATED - RULE_CREATED - RULE_UPDATED - RULE_ACTIVATED - RULE_DEACTIVATED - RULE_DRAFTED - RULE_DELETED - LIMIT_CREATED - LIMIT_UPDATED - LIMIT_ACTIVATED - LIMIT_DEACTIVATED - LIMIT_DRAFTED - LIMIT_DELETED description: Type of event that occurred. resourceType: type: string enum: - transaction - rule - limit description: Type of resource affected by the event. resourceId: type: string description: ID of the affected resource. action: type: string enum: - VALIDATE - CREATE - UPDATE - DELETE - ACTIVATE - DEACTIVATE - DRAFT description: Action performed on the resource. result: type: string enum: - SUCCESS - FAILED - ALLOW - DENY - REVIEW description: >- Result of the action. ALLOW/DENY/REVIEW for validations; SUCCESS/FAILED for CRUD operations. actor: $ref: '#/components/schemas/Actor' context: type: object additionalProperties: true description: >- Event context. For validations includes request and response. For CRUD includes before and after states. metadata: type: object additionalProperties: true description: Additional info (ticketId, correlationId, etc.). hash: type: string description: SHA-256 hash of event content for tamper detection. previousHash: type: string description: Hash of previous event in chain (forms immutable chain). createdAt: type: string format: date-time description: When the event occurred. ErrorFormat: type: object description: The response message error. required: - code - title - message properties: code: type: string description: A unique, stable identifier for the error. title: type: string description: A brief summary of the issue. message: type: string description: Detailed guidance for resolving the error. fields: type: object additionalProperties: true description: Additional information about the fields that caused the error. Actor: type: object description: Actor who performed the action. properties: id: type: string description: Actor identifier. actorType: type: string enum: - user - system description: Type of actor. name: type: string description: Actor name (if available). role: type: string description: Actor role (if available). ipAddress: type: string description: IP address (if available). examples: Error0007: summary: Invalid Path Parameter value: code: TRC-0007 title: Invalid Path Parameter message: >- The provided ID is not a valid UUID format. Please verify the ID and try again. ErrorUnauthenticated: summary: Unauthorized value: code: Unauthenticated title: Unauthorized message: >- API Key missing or invalid. Provide a valid API Key in the X-API-Key header. Error0140: summary: Audit Event Not Found value: code: TRC-0140 title: Audit Event Not Found message: >- The requested audit event does not exist. Please verify the event ID and try again. Error0004: summary: Internal Server Error value: code: TRC-0004 title: Internal Server Error message: >- An unexpected error occurred. Please try again later or contact support if the issue persists. securitySchemes: ApiKeyAuth: type: apiKey in: header name: X-API-Key description: >- API Key authentication. Used by single-tenant deployments (`MULTI_TENANT_ENABLED=false`). Sent on every `/v1/*` request. BearerAuth: type: http scheme: bearer bearerFormat: JWT description: >- JWT bearer authentication. Used by multi-tenant deployments (`MULTI_TENANT_ENABLED=true`). The JWT is issued by Access Manager and must carry the `tenantId` claim — Tracer resolves the tenant from the token, not from any header or body field. ````