Audit

Query centralized audit log

sfp server audit

Query centralized audit log

USAGE
  $ sfp server audit [--json] [--repository <value>] [-e <value>] [-t <value>] [--sfp-server-url <value>]
    [--source integration|approval|variable|environment|slack] [--action <value>] [--actor <value>] [--limit <value>]
    [--offset <value>] [--entity <value>] [--from <value>] [--to <value>] [--export] [--file-name <value>]

FLAGS
  -e, --email=<value>              Email address for authenticated user. Ignored if --application-token is provided. Can
                                   be set via SFP_SERVER_USER env var.
  -t, --application-token=<value>  Application token for CI/CD authentication. Can be set via SFP_SERVER_TOKEN env var
                                   (CLI flags take precedence over env vars).
      --action=<value>             Filter by action (e.g., "integration", "integration.created", "credentials.accessed")
      --actor=<value>              Filter by actor email
      --entity=<value>             Filter by audited entity identifier
      --export                     Start an async CSV export instead of returning rows
      --file-name=<value>          CSV filename for async export
      --from=<value>               ISO 8601 start timestamp, inclusive
      --limit=<value>              [default: 50] Maximum number of audit entries (max: 1000)
      --offset=<value>             Offset into audit entries
      --repository=<value>         Filter by repository identifier, e.g. `owner/repo`
      --sfp-server-url=<value>     URL of the SFP server. Can be set via SFP_SERVER_URL env var or config: sfp
                                   config:set server-url
      --source=<option>            Filter by audit source
                                   <options: integration|approval|variable|environment|slack>
      --to=<value>                 ISO 8601 end timestamp, exclusive

GLOBAL FLAGS
  --json  Format output as json.

DESCRIPTION
  Query centralized audit log

EXAMPLES
  $ sfp server audit --action integration

  $ sfp server audit --action integration.created

  $ sfp server audit --action credentials.accessed --actor dev@flxbl.io

  $ sfp server audit --source environment --repository flxbl-io/sf-core

  $ sfp server audit --actor dev@flxbl.io --limit 100

  $ sfp server audit --repository flxbl-io/sf-core --export

On this page