{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/signicat/main/json-schema/signicat-audit-log-schema.json",
  "title": "AuditLog",
  "x-generated": "2026-10-18",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/signicat-audit-logs-openapi.yml#/components/schemas/AuditLog",
  "required": [
    "cursor"
  ],
  "type": "object",
  "properties": {
    "cursor": {
      "type": "string",
      "description": "Globally unique reference to this specific audit log item"
    },
    "accountId": {
      "type": [
        "string",
        "null"
      ],
      "description": "ID of the target account"
    },
    "organizationId": {
      "type": [
        "string",
        "null"
      ],
      "description": "ID of the target organization, or the target account's parent organization"
    },
    "timestamp": {
      "type": "string",
      "description": "Timestamp of when the event which triggered the audit log occurred",
      "format": "date-time"
    },
    "serviceName": {
      "type": [
        "string",
        "null"
      ],
      "description": "Identifier for the service which triggered the audit log"
    },
    "message": {
      "type": [
        "string",
        "null"
      ],
      "description": "Short human-readable description of the event"
    },
    "sandbox": {
      "type": [
        "boolean",
        "null"
      ],
      "description": "Whether the target account is a sandbox or production account"
    },
    "userId": {
      "type": [
        "string",
        "null"
      ],
      "description": "ID of the user who performed the action"
    },
    "messageId": {
      "type": [
        "string",
        "null"
      ],
      "description": "Unique ID identifying this audit event"
    },
    "referenceId": {
      "type": [
        "string",
        "null"
      ],
      "description": "Reference ID used to correlate multiple events happening on the same resource"
    },
    "ipAddress": {
      "type": [
        "string",
        "null"
      ],
      "description": "IP address of user"
    },
    "traceId": {
      "type": [
        "string",
        "null"
      ],
      "description": "Trace ID"
    },
    "eventType": {
      "type": [
        "string",
        "null"
      ],
      "description": "Identifier for this kind of audit event"
    },
    "clientId": {
      "type": [
        "string",
        "null"
      ],
      "description": "ID of the client used to perform the action"
    },
    "jwtId": {
      "type": [
        "string",
        "null"
      ],
      "description": "ID of the JWT used to authenticate the user or client"
    },
    "expiresAt": {
      "type": [
        "string",
        "null"
      ],
      "description": "Timestamp of when this audit log will be permanently deleted from our systems",
      "format": "date-time"
    },
    "data": {
      "description": "Additional arbitrary data specific to this audit event",
      "nullable": true
    },
    "indexedData": {
      "type": [
        "object",
        "null"
      ],
      "additionalProperties": {
        "type": "string"
      },
      "description": "Additional arbitrary data specific to this audit event which is queryable"
    },
    "mayHaveMoreData": {
      "type": "boolean",
      "description": "If true, there may be more data available for this audit log by calling the cursor endpoint."
    }
  },
  "additionalProperties": false
}