Search Audit Logs
Takes a timestamp as a parameter and returns the audit log at or after the timestamp. Useful to begin pagination to get more logs.
For a complete list of all audit log types and their descriptions, see the Audit Logs Guide.
Permissions
RequiresTerritory admin or Organization admin permission.Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
UTC epoch timestamp, up to 1 year old from now
Optional filter to return only logs of a specific type. For Microsoft add-in activity, use add-in-specific log types such as user:word_add_in_docx_drafting or user:outlook_add_in_ask. See the Audit Logs Guide for a complete list of log types.
"auth:login"
Response
Audit log entry at or after time