CLI
Audit Log
View audit log entries for team actions from the CLI.
The audit log records who performed what action on which resource within your team. Use it to track changes to apps, projects, API keys, team membership, and more.
List audit log entries
owlmetry audit-log list --team-id <id> [options]| Flag | Required | Description |
|---|---|---|
--team-id <id> | Yes | Team UUID |
--resource-type <type> | No | Filter by resource type (see table below) |
--resource-id <id> | No | Filter by specific resource UUID |
--actor-id <id> | No | Filter by actor ID (user UUID or API key ID) |
--action <action> | No | Filter by action: create, update, delete |
--since <time> | No | Start time (relative like 1h, 7d, or ISO 8601) |
--until <time> | No | End time |
--limit <n> | No | Max entries to return |
--cursor <cursor> | No | Pagination cursor |
Resource types
| Type | Description |
|---|---|
app | App created, updated, or deleted |
project | Project created, updated, or deleted |
api_key | API key created, updated, or revoked |
team | Team settings changed |
team_member | Member added, role changed, or removed |
invitation | Team invitation sent, accepted, or revoked |
metric_definition | Metric definition created, updated, or deleted |
funnel_definition | Funnel definition created, updated, or deleted |
user | User account changes |
Actions
| Action | Description |
|---|---|
create | Resource was created |
update | Resource was modified |
delete | Resource was removed or revoked |
Actor types
Each audit log entry records who performed the action:
| Type | Description |
|---|---|
user | A logged-in user via the dashboard or CLI |
api_key | An agent API key (used by CLI or automation) |
system | An automated system action |
Examples
# All entries for a team in the last 24 hours
owlmetry audit-log list --team-id 550e8400-... --since 24h
# API key changes only
owlmetry audit-log list --team-id 550e8400-... --resource-type api_key
# Deletions in the last week
owlmetry audit-log list --team-id 550e8400-... --action delete --since 7d
# Actions by a specific user
owlmetry audit-log list --team-id 550e8400-... --actor-id a1b2c3d4-...
# Changes to a specific project
owlmetry audit-log list --team-id 550e8400-... --resource-type project --resource-id 550e8400-...JSON output
Use --format json for machine-readable output, including full changes and metadata fields that are not shown in the table view:
owlmetry audit-log list --team-id 550e8400-... --format jsonEach entry in the JSON response includes:
id— audit log entry UUIDteam_id— team UUIDactor_type—user,api_key, orsystemactor_id— UUID of the actoraction—create,update, ordeleteresource_type— type of resource affectedresource_id— UUID of the affected resourcechanges— object withbeforeandaftervalues for each changed field (null for creates/deletes)metadata— additional context (e.g., resource name at time of action)timestamp— ISO 8601 timestamp
