Get audit log by ID

Use this endpoint to retrieve the details of a specific audit log entry by its identifier.

GET /v1/governance/audit-logs/{id}

Get audit log by ID

cURL

curl --request GET \
  --url https://matcher.sandbox.lerian.net/v1/governance/audit-logs/{id} \
  --header 'Authorization: Bearer <token>'

200

Example

{
  "action": "CREATE",
  "changes": "<array>",
  "createdAt": "2025-01-15T10:30:00Z",
  "entityId": "550e8400-e29b-41d4-a716-446655440002",
  "entityType": "reconciliation_context",
  "hashVersion": 1,
  "id": "550e8400-e29b-41d4-a716-446655440000",
  "originalSize": 0,
  "prevHash": "0000000000000000000000000000000000000000000000000000000000000000",
  "recordHash": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
  "tenantId": "550e8400-e29b-41d4-a716-446655440001",
  "tenantSeq": 42,
  "truncated": false,
  "actorId": "[e-mail]"
}

Autorizaciones

Authorization · string · header · requerido

Bearer token authentication (format: "Bearer {token}")

Encabezados

X-Request-Id · string

A unique identifier for tracing the request across services.

Parámetros de ruta

id · string<uuid> · requerido

Audit Log ID

Respuesta

200

application/json

Indicates that the request was successful and the response contains the expected data.

action · string · requerido

Action that was performed on the entity (e.g. CREATE, UPDATE, DELETE)

Ejemplo:

"CREATE"

changes · array · requerido

JSON diff of the changes made to the entity; when the diff exceeded the outbox payload cap this carries a truncation marker envelope instead of the full diff (see truncated and originalSize)

Maximum array length: 10000

createdAt · string · requerido

Creation timestamp in RFC 3339 format (UTC)

Ejemplo:

"2025-01-15T10:30:00Z"

entityId · string · requerido

Identifier (UUID) of the entity that was modified

Ejemplo:

"550e8400-e29b-41d4-a716-446655440002"

entityType · string · requerido

Type of entity that was modified (e.g. reconciliation_context, match_rule)

Ejemplo:

"reconciliation_context"

hashVersion · integer<int32> · requerido

Version of the canonicalization scheme used to compute recordHash

Ejemplo:

1

id · string · requerido

Unique identifier (UUID) for the audit log entry

Ejemplo:

"550e8400-e29b-41d4-a716-446655440000"

originalSize · integer<int64> · requerido

Byte size of the original diff before truncation; zero when truncated is false or the marker was malformed

Ejemplo:

0

prevHash · string · requerido

Lowercase-hex SHA-256 hash of the previous record; the genesis record links to 32 zero bytes

Ejemplo:

"0000000000000000000000000000000000000000000000000000000000000000"

recordHash · string · requerido

Lowercase-hex SHA-256 hash of this record: SHA-256(prevHash || canonical content); empty for pre-hash-chain records

Ejemplo:

"9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08"

tenantId · string · requerido

Tenant ID (UUID) that owns this audit log entry

Ejemplo:

"550e8400-e29b-41d4-a716-446655440001"

tenantSeq · integer<int64> · requerido

1-based monotonic position of this entry within its tenant's audit hash chain

Ejemplo:

42

truncated · boolean · requerido

True when the original audit diff exceeded the outbox payload cap and was replaced with a truncation marker; consumers should treat changes as a metadata envelope, not the full diff, in this case

Ejemplo:

false

actorId · string

Identifier of the actor who performed the action; absent for system-originated changes

Ejemplo:

"[e-mail]"