Audit
Query centralized audit log
sfp server audit
Query centralized audit log
USAGE
$ sfp server audit [--json] [--repository <value>] [-e <value>] [-t <value>] [--sfp-server-url <value>]
[--source integration|approval|variable|environment|slack] [--action <value>] [--actor <value>] [--limit <value>]
[--offset <value>] [--entity <value>] [--from <value>] [--to <value>] [--export] [--file-name <value>]
FLAGS
-e, --email=<value> Email address for authenticated user. Ignored if --application-token is provided. Can
be set via SFP_SERVER_USER env var.
-t, --application-token=<value> Application token for CI/CD authentication. Can be set via SFP_SERVER_TOKEN env var
(CLI flags take precedence over env vars).
--action=<value> Filter by action (e.g., "integration", "integration.created", "credentials.accessed")
--actor=<value> Filter by actor email
--entity=<value> Filter by audited entity identifier
--export Start an async CSV export instead of returning rows
--file-name=<value> CSV filename for async export
--from=<value> ISO 8601 start timestamp, inclusive
--limit=<value> [default: 50] Maximum number of audit entries (max: 1000)
--offset=<value> Offset into audit entries
--repository=<value> Filter by repository identifier, e.g. `owner/repo`
--sfp-server-url=<value> URL of the SFP server. Can be set via SFP_SERVER_URL env var or config: sfp
config:set server-url
--source=<option> Filter by audit source
<options: integration|approval|variable|environment|slack>
--to=<value> ISO 8601 end timestamp, exclusive
GLOBAL FLAGS
--json Format output as json.
DESCRIPTION
Query centralized audit log
EXAMPLES
$ sfp server audit --action integration
$ sfp server audit --action integration.created
$ sfp server audit --action credentials.accessed --actor dev@flxbl.io
$ sfp server audit --source environment --repository flxbl-io/sf-core
$ sfp server audit --actor dev@flxbl.io --limit 100
$ sfp server audit --repository flxbl-io/sf-core --export