> ## Documentation Index
> Fetch the complete documentation index at: https://getfloo.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Export Audit Events Csv

> Export audit events as CSV. Requires admin role.

Returns up to 10,000 events matching the filters, ordered by created_at desc.



## OpenAPI

````yaml https://api.getfloo.com/openapi.json get /v1/orgs/{org_id}/audit/export.csv
openapi: 3.1.0
info:
  title: floo API
  version: 0.1.0
servers:
  - url: https://api.getfloo.com
security: []
paths:
  /v1/orgs/{org_id}/audit/export.csv:
    get:
      tags:
        - audit
      summary: Export Audit Events Csv
      description: >-
        Export audit events as CSV. Requires admin role.


        Returns up to 10,000 events matching the filters, ordered by created_at
        desc.
      operationId: audit_export_audit_events_csv
      parameters:
        - name: org_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
            title: Org Id
        - name: action
          in: query
          required: false
          schema:
            anyOf:
              - $ref: '#/components/schemas/AuditAction'
              - type: 'null'
            title: Action
        - name: actor_user_id
          in: query
          required: false
          schema:
            anyOf:
              - type: string
                format: uuid
              - type: 'null'
            title: Actor User Id
        - name: actor_api_key_id
          in: query
          required: false
          schema:
            anyOf:
              - type: string
                format: uuid
              - type: 'null'
            title: Actor Api Key Id
        - name: since
          in: query
          required: false
          schema:
            anyOf:
              - type: string
                format: date-time
              - type: 'null'
            title: Since
        - name: until
          in: query
          required: false
          schema:
            anyOf:
              - type: string
                format: date-time
              - type: 'null'
            title: Until
        - $ref: '#/components/parameters/X-Floo-Org-Id'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      security:
        - bearerAuth: []
components:
  schemas:
    AuditAction:
      type: string
      enum:
        - app.created
        - app.deleted
        - deploy.created
        - deploy.cancelled
        - deploy.promoted
        - deploy.rolled_back
        - deploy.restarted
        - deploy.approved
        - deploy.rejected
        - pr_infra.approved
        - pr_infra.rejected
        - pr_infra.carry_forward
        - edge_policy.set
        - edge_policy.deleted
        - preview.created
        - preview.deleted
        - preview.database_branch_reset
        - preview.managed_resource_reset
        - prod_orphan.torn_down
        - env.set
        - env.removed
        - env.legacy_secrets_reencrypted
        - login.failed
        - login.rate_limited
        - logs.read
        - error_groups.read
        - request_logs.read
        - env.read
        - dev_session.created
        - db.query
        - db_schema.read
        - db.migrated
        - managed_service_credentials.read
        - app_password.read
        - webhook_secret.revealed
        - access.broadened
        - storage_object.restored
        - storage_object.delete_requested
        - storage_object.deleted
        - managed_postgres_backup.created
        - managed_postgres.restored
        - managed_postgres.neon_migrated
        - managed_redis.recovered
        - managed_provisioning.resolved
        - api_key.created
        - api_key.revoked
        - app_api_key.created
        - app_api_key.revoked
        - app_api_key.scope_changed
        - app_consumer.created
        - app_consumer.deleted
        - reparo.config_updated
        - reparo.triggered
        - platform_admin.granted
        - platform_admin.revoked
        - control_plane_access.granted
        - provider_usage_exception.applied
        - provider_usage_exception.waived
        - cloud_run_usage.replayed
        - billing_plan_migration.scheduled
        - enterprise_contract_mrr.set
        - paygo_funding_session.read
        - paygo_auto_top_up.set
        - member.invited
        - member.removed
        - app_invite.created
        - app_invite.resent
        - app_invite.accepted
        - app_invite.revoked
        - app_membership.role_changed
        - app_membership.revoked
        - app_legacy_access.revoked
        - access_mode.changed
        - sso.configured
        - sso.portal_session_created
        - sso.state_changed
        - sso.disabled
        - sso.removed
        - sso.step_up_started
        - sso.step_up_completed
        - sso.step_up_denied
        - sso.step_up_failed
        - sso.recovery_code_generated
        - sso.recovery_code_confirm_attempted
        - sso.recovery_code_confirmed
        - sso.recovery_code_confirm_denied
        - sso.enforcement_enable_attempted
        - sso.enforcement_enabled
        - sso.enforcement_enable_denied
        - sso.enforcement_disable_attempted
        - sso.enforcement_disabled
        - sso.enforcement_disable_denied
        - sso.recovery_attempted
        - sso.recovered
        - sso.recovery_denied
        - sso.acquisition_cohort_enabled
        - sso.acquisition_cohort_disabled
      title: AuditAction
      description: Actions that are recorded in the audit log.
    ErrorResponse:
      properties:
        detail:
          $ref: '#/components/schemas/ErrorDetail'
      type: object
      required:
        - detail
      title: ErrorResponse
      description: Body of every error response except request validation (422).
    ErrorDetail:
      properties:
        code:
          type: string
          title: Code
        message:
          type: string
          title: Message
      additionalProperties: true
      type: object
      required:
        - code
        - message
      title: ErrorDetail
      description: Standard error envelope with operation-specific JSON context.
  parameters:
    X-Floo-Org-Id:
      name: X-Floo-Org-Id
      in: header
      required: false
      schema:
        type: string
        format: uuid
      description: Organization to act in; defaults to the one joined most recently.
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: A `floo_` API key.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.