IdenIden Docs
API ReferenceEvents

List security events

Returns security event logs in reverse-chronological order. Use the cursor parameter for incremental polling — pass the next_cursor from a previous response to retrieve the next page.

GET
/api/events/

Authorization

ApiKeyAuth
Authorization<token>

API key authentication. Format: Api-Key <your_api_key>

In: header

Query Parameters

actor_ip?string

Filter by actor IP address

actor_uuid?string

Filter by actor UUID

category?string

Event category (authentication, authorization, user_lifecycle, application, task, data_access, system, compliance)

cursor?string

Opaque pagination cursor from a previous response

event_type?string

Exact event type (e.g. 'session.login.succeeded')

event_type_prefix?string

Event type prefix, must end with '.' (e.g. 'session.')

limit?integer

Page size (default 50, max 200)

occurred_at__gte?string

Filter events on or after this ISO-8601 datetime

occurred_at__lte?string

Filter events on or before this ISO-8601 datetime

severity?string

Comma-separated severity levels (critical, high, medium, low, info)

subject_uuid?string

Filter by subject UUID

Response Body

application/json

curl -X GET "https://developer.idenhq.com/org/{tenant_slug}/api/events/"
{
  "next_cursor": "string",
  "previous_cursor": "string",
  "results": [
    {
      "event_id": "a7a26ff2-e851-45b6-9634-d595f45458b7",
      "event_type": "task.created",
      "event_version": 2147483647,
      "category": "string",
      "severity": "string",
      "occurred_at": "2019-08-24T14:15:22Z",
      "ingested_at": "2019-08-24T14:15:22Z",
      "actor": {
        "property1": null,
        "property2": null
      },
      "subject": {
        "property1": null,
        "property2": null
      },
      "source": {
        "property1": null,
        "property2": null
      },
      "payload": null
    }
  ]
}