List a Case's audit events

get

https://svc.cipherowl.ai/api/case-management/v1/cases/{caseId}/audit-events

Returns the Case's immutable audit trail: who did what, when, with event-specific detail in each event's payload (workflow events carry the Case state before and after the change; other event types carry their own fields). Oldest first by default; set descending for newest first. Every page of one viewing shares a stable snapshot boundary (echo page 1's snapshotSequence as beforeSequence), and a keyset cursor supports walks at any depth.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

caseId

string

required

Identifier of the Case (Case.id).

Query Params

pageSize

int32

Events per page, 1 to 100. Omitted or 0 means 50.

page

int32

Page to return, starting at 1; omitted or 0 returns page 1. Pages beyond
10000 are rejected.

descending

boolean

Sort direction by the event instant (then eventSequence). Default false =
ascending (oldest first). true = descending (newest first) for the
newest-on-top view.

beforeSequence

string

Snapshot high-water mark for stable pagination: the
snapshotSequence returned by the page-1 response. Later pages pass it so
only events at or below it are returned and counted; page 1 omits it (0)
and the server issues the boundary. The sequence is an insertion-order
identity, so the anchor is clock-free and immune to clock skew. Since a
valid sequence is >= 1, 0 means unset (page 1).

createdAfter

date-time

Optional inclusive lower bound on the event instant: only events at or
after it are returned and counted. When both bounds are set, this one must
not be after createdBefore. The window narrows results within the case-wide
snapshot boundary (beforeSequence); changing the filter is a new viewing —
restart at page 1 without beforeSequence.

createdBefore

date-time

Optional inclusive upper bound on the event instant: only events at or
before it are returned and counted.

actorIds

array of strings

Only events by these actors, matched exactly on subject id — the value
CaseAuditEvent.actorId (and Case.createdBy, Case.investigatorId) returns;
there is no name or email search. Empty = no actor filtering. Duplicates
are collapsed, and at most 100 ids may be named.

actorIds

actorType

string

Optional filter on the acting identity kind: "user" for actions a person
took, "system" for events a service authored. Empty = both. Any other value
is rejected as invalid, rather than served as an empty page.

cursorCreatedAt

date-time

Optional keyset cursor: the createdAt of the last event of the
previous page. Set together with cursorEventSequence — the pair is that
event's position in the total order — and the page resumes strictly after
it in the requested sort direction, reading a page's worth of index entries
at any depth. A cursor request must echo beforeSequence (the page-1
snapshot anchor), may not combine with page > 1, and skips the total (see
totalCount on the response for when it is computed). Filters must stay
identical across one cursor walk; changing them is a new viewing — restart
at page 1.

cursorEventSequence

string

The sequence half of the keyset cursor: the last event of the previous page
carries it as its eventSequence. Since a valid sequence is >= 1, 0 means
unset; both cursor fields are set together or not at all.

Response

200A successful response.