Get audit log summary for your tenant

​

Aggregate counts for the last 30 days, the timestamp of the most recent event, and a pipeline health signal.

Requires audit-log:read in the active entity. Every figure — including lastEventAt — is clamped by the caller's resolved tier using the same rules as GET /audit-logs/events, so nothing here can reflect rows the caller's list would refuse to return.

The counts cover a fixed 30-day window, independent of the caller's list filters — they describe the tenant, not the current query. lastEventAt is deliberately NOT windowed: it reports the most recent visible activity of any age, so a tenant quiet for over a month still gets a real timestamp rather than null.

This endpoint does not emit an audit row.

Responses

  • application/json
  • Authentication required

  • No active entity context

Request Example for get/audit-logs/summary
curl https://api.gpcn.com/v1/audit-logs/summary \
  --header 'X-API-Key: YOUR_SECRET_TOKEN'
{
  "success": true,
  "data": {
    "windowDays": 1,
    "countsByCategory": {
      "additionalProperty": 1
    },
    "countsByOutcome": {
      "additionalProperty": 1
    },
    "countsByActorType": {
      "additionalProperty": 1
    },
    "distinctActorsByType": {
      "additionalProperty": 1
    },
    "distinctActorCount": 1,
    "flagCounts": {
      "additionalProperty": 1
    },
    "lastEventAt": "2026-10-21T16:19:07.197Z",
    "lastHeartbeatAt": "2026-10-21T16:19:07.197Z",
    "pipelineHealth": "green",
    "healthNote": "pipeline_not_yet_active",
    "openGaps": [
      {
        "start": "2026-10-21T16:19:07.197Z",
        "end": "2026-10-21T16:19:07.197Z"
      }
    ]
  }
}