> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanoss.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get one audit event



## OpenAPI

````yaml /api-reference/earnie/audit-openapi.json get /v1/audit-log/{eventId}
openapi: 3.0.3
info:
  title: Earnie Audit Log API
  description: >-
    The organization's immutable compliance history. Requires the `audit:read`
    scope.
  version: 1.0.0
servers:
  - url: https://{tenant}.earnie.dev
    description: Your Earnie deployment
    variables:
      tenant:
        default: your-company
        description: >-
          Your organization's Earnie address, as shown in your browser when you
          sign in.
security:
  - bearerAuth: []
paths:
  /v1/audit-log/{eventId}:
    get:
      summary: Get one audit event
      operationId: getV1AuditLogEvent
      parameters:
        - name: eventId
          in: path
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Audit event details.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AuditLogEvent'
        '401':
          description: Not authenticated.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Missing audit:read.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Event not found in the caller's instance.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
components:
  schemas:
    AuditLogEvent:
      type: object
      required:
        - id
        - actor
        - event_type
        - payload
        - occurred_at
      properties:
        id:
          type: string
          format: uuid
        actor:
          $ref: '#/components/schemas/AuditActor'
        event_type:
          type: string
        payload:
          type: object
          additionalProperties: true
        occurred_at:
          type: string
          format: date-time
        project_id:
          type: string
          format: uuid
          nullable: true
        subject_kind:
          type: string
          nullable: true
        subject_id:
          type: string
          format: uuid
          nullable: true
        occurrence_count:
          type: integer
          description: >-
            Size of the occurrence group this row collapses, counting every
            member and not just the ones this page loaded. Present only when
            `collapse=true`; absent otherwise, so a default read is unchanged.
        occurrences:
          type: array
          description: >-
            Occurrence timestamps of the group, newest first, capped at 50.
            Present only when `collapse=true`.
          items:
            type: string
            format: date-time
        occurrences_truncated:
          type: boolean
          description: >-
            The group holds more members than `occurrences` lists. Present only
            when `collapse=true`.
        payloads_vary:
          type: boolean
          description: >-
            Two members of the group disagreed on their payload. Members are
            identical on the grouping key but NOT on their payloads — an
            `authentication.failed` run carries a different reason and remote_ip
            per occurrence — so the single payload on this row does not speak
            for all of them. Present only when `collapse=true`.
    Error:
      type: object
      required:
        - code
        - message
      properties:
        code:
          type: string
        message:
          type: string
    AuditActor:
      type: object
      required:
        - kind
        - id
      properties:
        kind:
          type: string
          enum:
            - user
            - api_key
            - integration
            - worker
            - agent
            - unauthenticated
        id:
          type: string
          format: uuid
        display:
          type: string
          nullable: true
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        An Earnie API key, sent as `Authorization: Bearer sk_earnie_...`. Create
        one under Settings > API keys. The key's scopes decide which operations
        it may call.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.