External DocumentationTo learn more, visit the Cloudflare documentation.
Actions
List Access Authentication Logs
Get the Zero Trust Access authentication audit logs for an account.

Preview this Workflow on desktop
Was this page helpful?
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
| Parameter | Description |
|---|---|
| Account ID | Your Cloudflare Account ID. |
| Fields | A comma-separated list of fields to include in the response. |
| Return All Pages | Automatically fetch all resources, page by page. |
| Since | The earliest event timestamp to query. |
| Sort Order | Select the chronological sorting order for the logs. |
| Until | The latest event timestamp to query. |
| Parameter | Description |
|---|---|
| Filter by user email. The match mode is controlled by the Email Operator parameter. | |
| Email Operator | Select the operator for the Email filter. |
| Limit | The maximum number of log entries to return. |
| Page | The page number of results to show. |
| Per Page | The number of results per page. |
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": [
{
"action": "login",
"allowed": true,
"app_domain": "test.example.com/admin",
"app_uid": "df7e2w5f-02b7-4d9d-af26-8d1988fca630",
"connection": "saml",
"created_at": "2014-01-01T05:20:00.12345Z",
"ip_address": "198.41.129.166",
"ray_id": "187d944c61940c77",
"user_email": "user@example.com"
}
]
}
Was this page helpful?