Create an audit export

Enqueues an asynchronous audit export (status GENERATING) for the given entity type, format, and RFC3339 window. The date range is capped at 365 days; a second concurrent export for the same entity type returns 409. The export generator worker materializes the object.

POST /v1/audit/exports

Create an audit export

cURL

curl --request POST \
  --url https://sta.sandbox.lerian.net/v1/audit/exports \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "entityType": "credential_access",
  "periodFrom": "2026-01-01T00:00:00Z",
  "periodTo": "2026-02-01T00:00:00Z",
  "format": "CSV"
}
'

202

{
  "entityType": "<string>",
  "format": "<string>",
  "id": "<string>",
  "periodFrom": "2023-11-07T05:31:56Z",
  "periodTo": "2023-11-07T05:31:56Z",
  "requestedAt": "2023-11-07T05:31:56Z",
  "requestedBy": "<string>",
  "status": "<string>",
  "completedAt": "2023-11-07T05:31:56Z",
  "failureReason": "<string>",
  "recordCount": 123,
  "sha256Hash": "<string>",
  "sizeBytes": 123
}

Authorizations

Authorization · string · header · required

JWT bearer token issued by the identity provider.

Body

application/json

Audit export creation payload

entityType · string · required

Audit entity to export (credential_access | transfer_history)

Example:

"credential_access"

periodFrom · string<date-time> · required

Inclusive lower bound of the export window (RFC3339)

Example:

"2026-01-01T00:00:00Z"

periodTo · string<date-time> · required

Exclusive upper bound of the export window (RFC3339)

Example:

"2026-02-01T00:00:00Z"

format · string

Export format (CSV | JSON_GZIP); defaults to CSV

Example:

"CSV"

Response

202

application/json

Accepted

entityType · string · required

format · string · required

id · string · required

periodFrom · string<date-time> · required

periodTo · string<date-time> · required

requestedAt · string<date-time> · required

requestedBy · string · required

status · string · required

completedAt · string<date-time>

failureReason · string

recordCount · integer<int64>

sha256Hash · string

sizeBytes · integer<int64>