filescom-action-logs

An ActionLog is an audit log of file actions performed by users or the system.

Logs available through this endpoint are retained for 6 months, after which they are automatically discarded. For longer retention, use Files.com SIEM integrations to stream logs in real time to your preferred SIEM, or configure SIEM streaming to a file.

All subcommands also accept the flags documented in CONTEXT.md (--api-key, --format, --workspace-id, --debug, and the pagination flags --cursor / --per-page / --max-pages on list). Those are not repeated below.

Commands

files-cli action-logs list

List Action Logs.

Flag	Type	Description
--filter	object	If set, return records where the specified field is equal to the supplied value. Valid fields are folder, path, src, destination, created_at, user_id or username. Valid field combinations are [ folder ], [ path ], [ src ], [ destination ], [ created_at ], [ user_id ], [ username ], [ folder, path ], [ folder, src ], [ folder, destination ], [ folder, created_at ], [ folder, user_id ], [ folder, username ], [ path, src ], [ path, destination ], [ path, created_at ], [ path, user_id ], [ path, username ], [ src, destination ], [ src, created_at ], [ src, user_id ], [ src, username ], [ destination, created_at ], [ destination, user_id ], [ destination, username ], [ created_at, user_id ], [ created_at, username ], [ user_id, username ], [ folder, path, src ], [ folder, path, destination ], [ folder, path, created_at ], [ folder, path, user_id ], [ folder, path, username ], [ folder, src, destination ], [ folder, src, created_at ], [ folder, src, user_id ], [ folder, src, username ], [ folder, destination, created_at ], [ folder, destination, user_id ], [ folder, destination, username ], [ folder, created_at, user_id ], [ folder, created_at, username ], [ folder, user_id, username ], [ path, src, destination ], [ path, src, created_at ], [ path, src, user_id ], [ path, src, username ], [ path, destination, created_at ], [ path, destination, user_id ], [ path, destination, username ], [ path, created_at, user_id ], [ path, created_at, username ], [ path, user_id, username ], [ src, destination, created_at ], [ src, destination, user_id ], [ src, destination, username ], [ src, created_at, user_id ], [ src, created_at, username ], [ src, user_id, username ], [ destination, created_at, user_id ], [ destination, created_at, username ], [ destination, user_id, username ], [ created_at, user_id, username ], [ folder, path, src, destination ], [ folder, path, src, created_at ], [ folder, path, src, user_id ], [ folder, path, src, username ], [ folder, path, destination, created_at ], [ folder, path, destination, user_id ], [ folder, path, destination, username ], [ folder, path, created_at, user_id ], [ folder, path, created_at, username ], [ folder, path, user_id, username ], [ folder, src, destination, created_at ], [ folder, src, destination, user_id ], [ folder, src, destination, username ], [ folder, src, created_at, user_id ], [ folder, src, created_at, username ], [ folder, src, user_id, username ], [ folder, destination, created_at, user_id ], [ folder, destination, created_at, username ], [ folder, destination, user_id, username ], [ folder, created_at, user_id, username ], [ path, src, destination, created_at ], [ path, src, destination, user_id ], [ path, src, destination, username ], [ path, src, created_at, user_id ], [ path, src, created_at, username ], [ path, src, user_id, username ], [ path, destination, created_at, user_id ], [ path, destination, created_at, username ], [ path, destination, user_id, username ], [ path, created_at, user_id, username ], [ src, destination, created_at, user_id ], [ src, destination, created_at, username ], [ src, destination, user_id, username ], [ src, created_at, user_id, username ], [ destination, created_at, user_id, username ], [ folder, path, src, destination, created_at ], [ folder, path, src, destination, user_id ], [ folder, path, src, destination, username ], [ folder, path, src, created_at, user_id ], [ folder, path, src, created_at, username ], [ folder, path, src, user_id, username ], [ folder, path, destination, created_at, user_id ], [ folder, path, destination, created_at, username ], [ folder, path, destination, user_id, username ], [ folder, path, created_at, user_id, username ], [ folder, src, destination, created_at, user_id ], [ folder, src, destination, created_at, username ], [ folder, src, destination, user_id, username ], [ folder, src, created_at, user_id, username ], [ folder, destination, created_at, user_id, username ], [ path, src, destination, created_at, user_id ], [ path, src, destination, created_at, username ], [ path, src, destination, user_id, username ], [ path, src, created_at, user_id, username ], [ path, destination, created_at, user_id, username ], [ src, destination, created_at, user_id, username ], [ folder, path, src, destination, created_at, user_id ], [ folder, path, src, destination, created_at, username ], [ folder, path, src, destination, user_id, username ], [ folder, path, src, created_at, user_id, username ], [ folder, path, destination, created_at, user_id, username ], [ folder, src, destination, created_at, user_id, username ], [ path, src, destination, created_at, user_id, username ] or [ folder, path, src, destination, created_at, user_id, username ].
--filter-gt	object	If set, return records where the specified field is greater than the supplied value. Valid fields are created_at. Valid field combinations are [ folder ], [ path ], [ src ], [ destination ], [ created_at ], [ user_id ], [ username ], [ folder, path ], [ folder, src ], [ folder, destination ], [ folder, created_at ], [ folder, user_id ], [ folder, username ], [ path, src ], [ path, destination ], [ path, created_at ], [ path, user_id ], [ path, username ], [ src, destination ], [ src, created_at ], [ src, user_id ], [ src, username ], [ destination, created_at ], [ destination, user_id ], [ destination, username ], [ created_at, user_id ], [ created_at, username ], [ user_id, username ], [ folder, path, src ], [ folder, path, destination ], [ folder, path, created_at ], [ folder, path, user_id ], [ folder, path, username ], [ folder, src, destination ], [ folder, src, created_at ], [ folder, src, user_id ], [ folder, src, username ], [ folder, destination, created_at ], [ folder, destination, user_id ], [ folder, destination, username ], [ folder, created_at, user_id ], [ folder, created_at, username ], [ folder, user_id, username ], [ path, src, destination ], [ path, src, created_at ], [ path, src, user_id ], [ path, src, username ], [ path, destination, created_at ], [ path, destination, user_id ], [ path, destination, username ], [ path, created_at, user_id ], [ path, created_at, username ], [ path, user_id, username ], [ src, destination, created_at ], [ src, destination, user_id ], [ src, destination, username ], [ src, created_at, user_id ], [ src, created_at, username ], [ src, user_id, username ], [ destination, created_at, user_id ], [ destination, created_at, username ], [ destination, user_id, username ], [ created_at, user_id, username ], [ folder, path, src, destination ], [ folder, path, src, created_at ], [ folder, path, src, user_id ], [ folder, path, src, username ], [ folder, path, destination, created_at ], [ folder, path, destination, user_id ], [ folder, path, destination, username ], [ folder, path, created_at, user_id ], [ folder, path, created_at, username ], [ folder, path, user_id, username ], [ folder, src, destination, created_at ], [ folder, src, destination, user_id ], [ folder, src, destination, username ], [ folder, src, created_at, user_id ], [ folder, src, created_at, username ], [ folder, src, user_id, username ], [ folder, destination, created_at, user_id ], [ folder, destination, created_at, username ], [ folder, destination, user_id, username ], [ folder, created_at, user_id, username ], [ path, src, destination, created_at ], [ path, src, destination, user_id ], [ path, src, destination, username ], [ path, src, created_at, user_id ], [ path, src, created_at, username ], [ path, src, user_id, username ], [ path, destination, created_at, user_id ], [ path, destination, created_at, username ], [ path, destination, user_id, username ], [ path, created_at, user_id, username ], [ src, destination, created_at, user_id ], [ src, destination, created_at, username ], [ src, destination, user_id, username ], [ src, created_at, user_id, username ], [ destination, created_at, user_id, username ], [ folder, path, src, destination, created_at ], [ folder, path, src, destination, user_id ], [ folder, path, src, destination, username ], [ folder, path, src, created_at, user_id ], [ folder, path, src, created_at, username ], [ folder, path, src, user_id, username ], [ folder, path, destination, created_at, user_id ], [ folder, path, destination, created_at, username ], [ folder, path, destination, user_id, username ], [ folder, path, created_at, user_id, username ], [ folder, src, destination, created_at, user_id ], [ folder, src, destination, created_at, username ], [ folder, src, destination, user_id, username ], [ folder, src, created_at, user_id, username ], [ folder, destination, created_at, user_id, username ], [ path, src, destination, created_at, user_id ], [ path, src, destination, created_at, username ], [ path, src, destination, user_id, username ], [ path, src, created_at, user_id, username ], [ path, destination, created_at, user_id, username ], [ src, destination, created_at, user_id, username ], [ folder, path, src, destination, created_at, user_id ], [ folder, path, src, destination, created_at, username ], [ folder, path, src, destination, user_id, username ], [ folder, path, src, created_at, user_id, username ], [ folder, path, destination, created_at, user_id, username ], [ folder, src, destination, created_at, user_id, username ], [ path, src, destination, created_at, user_id, username ] or [ folder, path, src, destination, created_at, user_id, username ].
--filter-gteq	object	If set, return records where the specified field is greater than or equal the supplied value. Valid fields are created_at. Valid field combinations are [ folder ], [ path ], [ src ], [ destination ], [ created_at ], [ user_id ], [ username ], [ folder, path ], [ folder, src ], [ folder, destination ], [ folder, created_at ], [ folder, user_id ], [ folder, username ], [ path, src ], [ path, destination ], [ path, created_at ], [ path, user_id ], [ path, username ], [ src, destination ], [ src, created_at ], [ src, user_id ], [ src, username ], [ destination, created_at ], [ destination, user_id ], [ destination, username ], [ created_at, user_id ], [ created_at, username ], [ user_id, username ], [ folder, path, src ], [ folder, path, destination ], [ folder, path, created_at ], [ folder, path, user_id ], [ folder, path, username ], [ folder, src, destination ], [ folder, src, created_at ], [ folder, src, user_id ], [ folder, src, username ], [ folder, destination, created_at ], [ folder, destination, user_id ], [ folder, destination, username ], [ folder, created_at, user_id ], [ folder, created_at, username ], [ folder, user_id, username ], [ path, src, destination ], [ path, src, created_at ], [ path, src, user_id ], [ path, src, username ], [ path, destination, created_at ], [ path, destination, user_id ], [ path, destination, username ], [ path, created_at, user_id ], [ path, created_at, username ], [ path, user_id, username ], [ src, destination, created_at ], [ src, destination, user_id ], [ src, destination, username ], [ src, created_at, user_id ], [ src, created_at, username ], [ src, user_id, username ], [ destination, created_at, user_id ], [ destination, created_at, username ], [ destination, user_id, username ], [ created_at, user_id, username ], [ folder, path, src, destination ], [ folder, path, src, created_at ], [ folder, path, src, user_id ], [ folder, path, src, username ], [ folder, path, destination, created_at ], [ folder, path, destination, user_id ], [ folder, path, destination, username ], [ folder, path, created_at, user_id ], [ folder, path, created_at, username ], [ folder, path, user_id, username ], [ folder, src, destination, created_at ], [ folder, src, destination, user_id ], [ folder, src, destination, username ], [ folder, src, created_at, user_id ], [ folder, src, created_at, username ], [ folder, src, user_id, username ], [ folder, destination, created_at, user_id ], [ folder, destination, created_at, username ], [ folder, destination, user_id, username ], [ folder, created_at, user_id, username ], [ path, src, destination, created_at ], [ path, src, destination, user_id ], [ path, src, destination, username ], [ path, src, created_at, user_id ], [ path, src, created_at, username ], [ path, src, user_id, username ], [ path, destination, created_at, user_id ], [ path, destination, created_at, username ], [ path, destination, user_id, username ], [ path, created_at, user_id, username ], [ src, destination, created_at, user_id ], [ src, destination, created_at, username ], [ src, destination, user_id, username ], [ src, created_at, user_id, username ], [ destination, created_at, user_id, username ], [ folder, path, src, destination, created_at ], [ folder, path, src, destination, user_id ], [ folder, path, src, destination, username ], [ folder, path, src, created_at, user_id ], [ folder, path, src, created_at, username ], [ folder, path, src, user_id, username ], [ folder, path, destination, created_at, user_id ], [ folder, path, destination, created_at, username ], [ folder, path, destination, user_id, username ], [ folder, path, created_at, user_id, username ], [ folder, src, destination, created_at, user_id ], [ folder, src, destination, created_at, username ], [ folder, src, destination, user_id, username ], [ folder, src, created_at, user_id, username ], [ folder, destination, created_at, user_id, username ], [ path, src, destination, created_at, user_id ], [ path, src, destination, created_at, username ], [ path, src, destination, user_id, username ], [ path, src, created_at, user_id, username ], [ path, destination, created_at, user_id, username ], [ src, destination, created_at, user_id, username ], [ folder, path, src, destination, created_at, user_id ], [ folder, path, src, destination, created_at, username ], [ folder, path, src, destination, user_id, username ], [ folder, path, src, created_at, user_id, username ], [ folder, path, destination, created_at, user_id, username ], [ folder, src, destination, created_at, user_id, username ], [ path, src, destination, created_at, user_id, username ] or [ folder, path, src, destination, created_at, user_id, username ].
--filter-prefix	object	If set, return records where the specified field is prefixed by the supplied value. Valid fields are folder, path, src, destination or username. Valid field combinations are [ folder ], [ path ], [ src ], [ destination ], [ created_at ], [ user_id ], [ username ], [ folder, path ], [ folder, src ], [ folder, destination ], [ folder, created_at ], [ folder, user_id ], [ folder, username ], [ path, src ], [ path, destination ], [ path, created_at ], [ path, user_id ], [ path, username ], [ src, destination ], [ src, created_at ], [ src, user_id ], [ src, username ], [ destination, created_at ], [ destination, user_id ], [ destination, username ], [ created_at, user_id ], [ created_at, username ], [ user_id, username ], [ folder, path, src ], [ folder, path, destination ], [ folder, path, created_at ], [ folder, path, user_id ], [ folder, path, username ], [ folder, src, destination ], [ folder, src, created_at ], [ folder, src, user_id ], [ folder, src, username ], [ folder, destination, created_at ], [ folder, destination, user_id ], [ folder, destination, username ], [ folder, created_at, user_id ], [ folder, created_at, username ], [ folder, user_id, username ], [ path, src, destination ], [ path, src, created_at ], [ path, src, user_id ], [ path, src, username ], [ path, destination, created_at ], [ path, destination, user_id ], [ path, destination, username ], [ path, created_at, user_id ], [ path, created_at, username ], [ path, user_id, username ], [ src, destination, created_at ], [ src, destination, user_id ], [ src, destination, username ], [ src, created_at, user_id ], [ src, created_at, username ], [ src, user_id, username ], [ destination, created_at, user_id ], [ destination, created_at, username ], [ destination, user_id, username ], [ created_at, user_id, username ], [ folder, path, src, destination ], [ folder, path, src, created_at ], [ folder, path, src, user_id ], [ folder, path, src, username ], [ folder, path, destination, created_at ], [ folder, path, destination, user_id ], [ folder, path, destination, username ], [ folder, path, created_at, user_id ], [ folder, path, created_at, username ], [ folder, path, user_id, username ], [ folder, src, destination, created_at ], [ folder, src, destination, user_id ], [ folder, src, destination, username ], [ folder, src, created_at, user_id ], [ folder, src, created_at, username ], [ folder, src, user_id, username ], [ folder, destination, created_at, user_id ], [ folder, destination, created_at, username ], [ folder, destination, user_id, username ], [ folder, created_at, user_id, username ], [ path, src, destination, created_at ], [ path, src, destination, user_id ], [ path, src, destination, username ], [ path, src, created_at, user_id ], [ path, src, created_at, username ], [ path, src, user_id, username ], [ path, destination, created_at, user_id ], [ path, destination, created_at, username ], [ path, destination, user_id, username ], [ path, created_at, user_id, username ], [ src, destination, created_at, user_id ], [ src, destination, created_at, username ], [ src, destination, user_id, username ], [ src, created_at, user_id, username ], [ destination, created_at, user_id, username ], [ folder, path, src, destination, created_at ], [ folder, path, src, destination, user_id ], [ folder, path, src, destination, username ], [ folder, path, src, created_at, user_id ], [ folder, path, src, created_at, username ], [ folder, path, src, user_id, username ], [ folder, path, destination, created_at, user_id ], [ folder, path, destination, created_at, username ], [ folder, path, destination, user_id, username ], [ folder, path, created_at, user_id, username ], [ folder, src, destination, created_at, user_id ], [ folder, src, destination, created_at, username ], [ folder, src, destination, user_id, username ], [ folder, src, created_at, user_id, username ], [ folder, destination, created_at, user_id, username ], [ path, src, destination, created_at, user_id ], [ path, src, destination, created_at, username ], [ path, src, destination, user_id, username ], [ path, src, created_at, user_id, username ], [ path, destination, created_at, user_id, username ], [ src, destination, created_at, user_id, username ], [ folder, path, src, destination, created_at, user_id ], [ folder, path, src, destination, created_at, username ], [ folder, path, src, destination, user_id, username ], [ folder, path, src, created_at, user_id, username ], [ folder, path, destination, created_at, user_id, username ], [ folder, src, destination, created_at, user_id, username ], [ path, src, destination, created_at, user_id, username ] or [ folder, path, src, destination, created_at, user_id, username ].
--filter-lt	object	If set, return records where the specified field is less than the supplied value. Valid fields are created_at. Valid field combinations are [ folder ], [ path ], [ src ], [ destination ], [ created_at ], [ user_id ], [ username ], [ folder, path ], [ folder, src ], [ folder, destination ], [ folder, created_at ], [ folder, user_id ], [ folder, username ], [ path, src ], [ path, destination ], [ path, created_at ], [ path, user_id ], [ path, username ], [ src, destination ], [ src, created_at ], [ src, user_id ], [ src, username ], [ destination, created_at ], [ destination, user_id ], [ destination, username ], [ created_at, user_id ], [ created_at, username ], [ user_id, username ], [ folder, path, src ], [ folder, path, destination ], [ folder, path, created_at ], [ folder, path, user_id ], [ folder, path, username ], [ folder, src, destination ], [ folder, src, created_at ], [ folder, src, user_id ], [ folder, src, username ], [ folder, destination, created_at ], [ folder, destination, user_id ], [ folder, destination, username ], [ folder, created_at, user_id ], [ folder, created_at, username ], [ folder, user_id, username ], [ path, src, destination ], [ path, src, created_at ], [ path, src, user_id ], [ path, src, username ], [ path, destination, created_at ], [ path, destination, user_id ], [ path, destination, username ], [ path, created_at, user_id ], [ path, created_at, username ], [ path, user_id, username ], [ src, destination, created_at ], [ src, destination, user_id ], [ src, destination, username ], [ src, created_at, user_id ], [ src, created_at, username ], [ src, user_id, username ], [ destination, created_at, user_id ], [ destination, created_at, username ], [ destination, user_id, username ], [ created_at, user_id, username ], [ folder, path, src, destination ], [ folder, path, src, created_at ], [ folder, path, src, user_id ], [ folder, path, src, username ], [ folder, path, destination, created_at ], [ folder, path, destination, user_id ], [ folder, path, destination, username ], [ folder, path, created_at, user_id ], [ folder, path, created_at, username ], [ folder, path, user_id, username ], [ folder, src, destination, created_at ], [ folder, src, destination, user_id ], [ folder, src, destination, username ], [ folder, src, created_at, user_id ], [ folder, src, created_at, username ], [ folder, src, user_id, username ], [ folder, destination, created_at, user_id ], [ folder, destination, created_at, username ], [ folder, destination, user_id, username ], [ folder, created_at, user_id, username ], [ path, src, destination, created_at ], [ path, src, destination, user_id ], [ path, src, destination, username ], [ path, src, created_at, user_id ], [ path, src, created_at, username ], [ path, src, user_id, username ], [ path, destination, created_at, user_id ], [ path, destination, created_at, username ], [ path, destination, user_id, username ], [ path, created_at, user_id, username ], [ src, destination, created_at, user_id ], [ src, destination, created_at, username ], `[ src, destination, user_id, username