Retrieve log events for a specific user.
Note: For more information on all possible event types, their respective acronyms and descriptions, see Log Event Type Codes.
For more information on the list of fields that can be used in sort, see Searchable Fields.
Auth0 limits the number of logs you can return by search criteria to 100 logs per request. Furthermore, you may only paginate through up to 1,000 search results. If you exceed this threshold, please redefine your search.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
ID of the user of the logs to retrieve
Page index of the results to return. First page is 0.
Number of results per page. Paging is disabled if parameter not sent.
1 <= x <= 100Field to sort by. Use fieldname:1 for ascending order and fieldname:-1 for descending.
^((date)|(connection)|(client_id)|(client_name)|(ip)|(user_id)|(user_name)|(description)|(user_agent)|(type)|(details)|(strategy)|(strategy_type))\:(1|-1)$Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
Logs successfully retrieved.
Date when the event occurred in ISO 8601 format.
Type of event.
Description of this event.
Name of the connection the event relates to.
ID of the connection the event relates to.
ID of the client (application).
Name of the client (application).
IP address of the log event source.
Hostname the event applies to.
ID of the user involved in the event.
Name of the user involved in the event.
API audience the event applies to.
Scope permissions applied to the event.
Name of the strategy involved in the event.
Type of strategy involved in the event.
Unique ID of the event.
Whether the client was a mobile device (true) or desktop/laptop/server (false).
Additional useful details about this event (structure is dependent upon event type).
User agent string from the client device that caused the event.
Information about security-related signals.
Information about the location that triggered this event based on the ip.