Starts an asynchronous task that exports audit records for the
authenticated user's tenant to a downloadable CSV (comma-separated values)
file. Accepts the same filters as the synchronous query endpoint: audit
domains, actor IDs, impersonation, resource type/name, and a
Unix-timestamp time range.
Tenant is derived from the user token — do not pass tenant as a path or
query parameter.
Asynchronous flow: This endpoint returns immediately with 202 Accepted and a taskId. Poll GET /v1/audits/query-tasks/{taskId} until
status becomes Success (or Failed), then call
GET /v1/audits/query-tasks/{taskId}/download to retrieve the CSV result.
Use this export flow instead of the synchronous /v1/audits/records query
when you need the full result set rather than a single page.
Audit domain hierarchy: Each value in auditDomains automatically
expands to include all child domains, and each value in
ignoredAuditDomains excludes a domain and all of its descendants.
Exclusion takes precedence over inclusion.
Rate limit: Tier 2 (60 requests/minute per tenant).
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||