Get audit log entry counts | LaunchDarkly

Returns aggregate counts of audit log entries per time bucket. Used for dashboard overlays that show flag targeting changes.

Authentication

Authorizationstring

API Key authentication via header

Query parameters

beforelongOptional

A timestamp filter, expressed as a Unix epoch time in milliseconds. Defaults to now.

afterlongRequired

A timestamp filter, expressed as a Unix epoch time in milliseconds. Required.

bucketslongOptional

Number of time buckets to divide the range into. Default 50, max 500.

Request

This endpoint expects a list of objects.

effectenumRequired

Whether this statement should allow or deny actions on the resources.

Allowed values:

resourceslist of stringsOptional

Resource specifier strings

notResourceslist of stringsOptional

Targeted resources are the resources NOT in this list. The resources field must be empty to use this field.

actionslist of stringsOptional

Actions to perform on a resource

notActionslist of stringsOptional

Targeted actions are the actions NOT in this list. The actions field must be empty to use this field.

Response

Audit log entry counts response

bucketslist of objects

totalCountlong

bucketIntervalMslong

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

429

Too Many Requests Error

API Key authentication via header

A timestamp filter, expressed as a Unix epoch time in milliseconds. Defaults to now.

A timestamp filter, expressed as a Unix epoch time in milliseconds. Required.

Number of time buckets to divide the range into. Default 50, max 500.

This endpoint expects a list of objects.

Whether this statement should allow or deny actions on the resources.

Resource specifier strings

Targeted resources are the resources NOT in this list. The resources field must be empty to use this field.

Actions to perform on a resource

Targeted actions are the actions NOT in this list. The actions field must be empty to use this field.

Audit log entry counts response

$	curl -X POST "https://app.launchdarkly.com/api/v2/auditlog/counts?after=1" \
>	-H "Authorization: <apiKey>" \
>	-H "Content-Type: application/json" \
>	-d '[
>	{
>	"effect": "allow"
>	}
>	]'

1	{
2	"buckets": [
3	{
4	"timestamp": 1,
5	"count": 1
6	}
7	],
8	"totalCount": 1,
9	"bucketIntervalMs": 1
10	}

$	curl -X POST "https://app.launchdarkly.com/api/v2/auditlog/counts?after=1" \
>	-H "Authorization: <apiKey>" \
>	-H "Content-Type: application/json" \
>	-d '[
>	{
>	"effect": "allow"
>	}
>	]'

1	{
2	"buckets": [
3	{
4	"timestamp": 1,
5	"count": 1
6	}
7	],
8	"totalCount": 1,
9	"bucketIntervalMs": 1
10	}