Try it free

List monitoring configuration audit logs

  • Latest Dynatrace
  • Reference
  • Published Oct 13, 2026

List audit logs for a monitoring configuration of Extension 2.0 in Dynatrace with the Extensions API by extension name, configuration ID, and time range.

GETSaaShttps://{your-environment-id}.apps.dynatrace.com/platform/extensions/v2/extensions/{extension-name}/monitoring-configurations/{configuration-id}/audit

Overview

You provide the extension name and configuration ID in the path, and can filter with page-size, page-key, from, to, and sort. Dynatrace returns the audit log entries for that monitoring configuration.

Authentication

To execute this request, you need a platform token or OAuth access token with extensions:configurations:read scope. To learn how to obtain and use it, see Tokens and authentication.

Parameters

ParameterTypeDescriptionInRequired
page-sizeinteger

The amount of extensions in a single response payload.

The maximal allowed page size is 100.

If not set, 20 is used.

queryOptional
page-keystring

The cursor for the next page of results. You can find it in the next-page-key field of the previous response.

The first page is always returned if you don't specify the page-key query parameter.

When the page-key is set to obtain subsequent pages, you must omit all other query parameters.

queryOptional
extension-namestring

The name of the requested Extension 2.0.

pathRequired
configuration-idstring

The ID of the requested monitoring configuration.

pathRequired
fromstring

The start of the requested timeframe.

You can use one of the following formats:

  • Timestamp in UTC milliseconds.
  • Human-readable format of 2021-01-25T05:57:01.123+01:00. If no time zone is specified, UTC is used. You can use a space character instead of the T. Seconds and fractions of a second are optional.
  • Relative timeframe, back from now. The format is now-NU/A, where N is the amount of time, U is the unit of time, and A is an alignment. The alignment rounds all the smaller values to the nearest zero in the past. For example, now-1y/w is one year back, aligned by a week. You can also specify relative timeframe without an alignment: now-NU. Supported time units for the relative timeframe are:
    • m: minutes
    • h: hours
    • d: days
    • w: weeks
    • M: months
    • y: years

If not set, the relative timeframe of two weeks is used (now-2w).

queryOptional
tostring

The end of the requested timeframe.

You can use one of the following formats:

  • Timestamp in UTC milliseconds.
  • Human-readable format of 2021-01-25T05:57:01.123+01:00. If no time zone is specified, UTC is used. You can use a space character instead of the T. Seconds and fractions of a second are optional.
  • Relative timeframe, back from now. The format is now-NU/A, where N is the amount of time, U is the unit of time, and A is an alignment. The alignment rounds all the smaller values to the nearest zero in the past. For example, now-1y/w is one year back, aligned by a week. You can also specify relative timeframe without an alignment: now-NU. Supported time units for the relative timeframe are:
    • m: minutes
    • h: hours
    • d: days
    • w: weeks
    • M: months
    • y: years

If not set, the current timestamp is used.

queryOptional
sortstring

The sorting of audit log entries:

  • timestamp: Oldest first.
  • -timestamp: Newest first.

If not set, the newest first sorting is applied.

queryRequired

Response

Response codes

CodeTypeDescription
200AuditLog

Success.

4XXErrorEnvelope

Client error.

5XXErrorEnvelope

Server error.

Response body objects

The AuditLog object

The audit log of your environment.

ElementTypeDescription
auditLogsAuditLogEntry[]

A list of audit log entries ordered by the creation timestamp.

nextPageKeystring

The cursor for the next page of results. Has the value of null on the last page.

Use it in the nextPageKey query parameter to obtain subsequent pages of the result.

pageSizeinteger

The number of entries per page.

totalCountinteger

The total number of entries in the result.

The AuditLogEntry object

An entry of the audit log.

ElementTypeDescription
categorystring

The category of the recorded operation.

The element can hold these values
  • ACTIVEGATE_TOKEN
  • BUILD_UNIT_V2
  • CONFIG
  • MANUAL_TAGGING_SERVICE
  • TENANT_LIFECYCLE
  • TOKEN
  • WEB_UI
dt.settings.keystring

The key of the affected object of a setting for entries of category CONFIG.

dt.settings.object_idstring

The ID of the affected object of a setting for entries of category CONFIG.

dt.settings.object_summarystring

The value summary for entries of category CONFIG.

dt.settings.schema_idstring

The schema ID or config ID for entries of category CONFIG.

dt.settings.scope_idstring

The persistence scope for entries of category CONFIG, e.g. an ME identifier.

dt.settings.scope_namestring

The display name of the scope for entries of category CONFIG.

entityIdstring

The ID of an entity from the category.

For example, it can be config ID for the CONFIG category or token ID for the TOKEN category.

environmentIdstring

The ID of the Dynatrace environment where the recorded operation occurred.

eventTypestring

The type of the recorded operation.

  • LOGIN -> A user logged in
  • LOGOUT -> A user logged out
  • CREATE -> An object was created
  • UPDATE -> An object was updated
  • DELETE -> An object was deleted
  • REVOKE -> An Active Gate token was revoked
  • TAG_ADD -> A manual tag was added
  • TAG_REMOVE -> A manual tag was removed
  • TAG_UPDATE -> A manual tag was updated
  • REMOTE_CONFIGURATION_MANAGEMENT -> A Remote Configuration Management related operation occurred
The element can hold these values
  • CREATE
  • DELETE
  • LOGIN
  • LOGOUT
  • REORDER
  • REVOKE
  • TAG_ADD
  • TAG_REMOVE
  • TAG_UPDATE
  • UPDATE
logIdstring

The ID of the log entry.

messagestring

The logged message.

patchAnyValue

The patch of the recorded operation as the JSON representation.

The format is an enhanced RFC 6902. The patch also carries the previous value in the oldValue field.

successboolean

The recorded operation is successful (true) or failed (false).

timestampinteger

The timestamp of the record creation, in UTC milliseconds.

userstring

The ID of the user who performed the recorded operation.

userOriginstring

The origin and the IP address of the user.

userTypestring

The type of the authentication of the user.

  • USER_NAME -> User was logged in the UI
  • TOKEN_HASH -> URL Token or DevOps Token, the hash of the token is logged
  • SERVICE_NAME -> No authenticated user at all, this action was performed by a system service automatically
  • PUBLIC_TOKEN_IDENTIFIER -> API Token, the public token id is logged
The element can hold these values
  • PUBLIC_TOKEN_IDENTIFIER
  • SERVICE_NAME
  • TOKEN_HASH
  • USER_NAME

The AnyValue object

A schema representing an arbitrary value type.

The ErrorEnvelope object

ElementTypeDescription
errorError-

The Error object

ElementTypeDescription
codeinteger

The HTTP status code.

detailsErrorDetails

The error details.

messagestring

The error message.

The ErrorDetails object

The error details.

ElementTypeDescription
constraintViolationsConstraintViolation[]

A list of constraint violations.

The ConstraintViolation object

A list of constraint violations.

ElementTypeDescription
locationstring-
messagestring-
parameterLocationstring-
The element can hold these values
  • HEADER
  • PATH
  • PAYLOAD_BODY
  • QUERY
pathstring-

Response body JSON models

{
"auditLogs": [
{
"category": "CONFIG",
"entityId": "MOBILE_RUM: MOBILE_APPLICATION-752C223D59734CD2",
"environmentId": "prod-env-13",
"eventType": "UPDATE",
"logId": "197425568800060000",
"patch": [
{
"oldValue": 20000,
"op": "replace",
"path": "/refreshTimeIntervalMillis",
"value": 30000
}
],
"success": true,
"timestamp": 1974255688445,
"user": "test.user@company.com",
"userOrigin": "webui (192.168.0.2)",
"userType": "USER_NAME"
}
],
"nextPageKey": "___a7acX3q0AAAAAACJidWlsdGluOnNlcnZpY2lUVEJCUzBaNVIxVjJOSGt6Y3oyLTcwMUZWRkxlclH__9rtpxferQ",
"pageSize": 5,
"totalCount": 10
}
{
"error": {
"code": 1,
"details": {
"constraintViolations": [
{
"location": "string",
"message": "string",
"parameterLocation": "HEADER",
"path": "string"
}
]
},
"message": "string"
}
}
Related tags
Platform APIDynatrace PlatformInfrastructure Observability