Get Audit Logs

Returns a paged, time-bounded list of WebEOC audit logs Tracks and records administrative events that occur in WebEOC Nexus; supports monitoring and assessment of administrator/user activities; aids in troubleshooting..

Get Audit Logs endpoint description
Description

Returns a paged, time-bounded list of WebEOC audit logs.

URL /audit-logs /audit-logs/query?fromDate={fromDate}&toDate={toDate}&username={username}&positionName={positionName}&incident={incident}&message={message}&type={type} (search fields in the query string)
Method POST

Pagination (Requests headers)

Pagination
Header Description Default
X-Paging-Page 1-based page number (page 1 = first page; records skipped = (page - 1) x page size) 1
X-Paging-PageSize page size - maximum records per page (clamped 1-50000) 5000
     
     

 

Parameters (Search fields)

Parameters
Variable name Type Description Required

fromDate

string (date-time) Start of the range. UTC; a value with no time zone is treated as UTC. True
toDate string (date-time) End of the range. UTC. True
username string filter by user name (partial match). False
positionName string Filter by position name (partial match). False
incident string Filter by incident name (partial match). False
message string Filter by message text (partial match). False
type string Filter by audit record type (exact match). False

Return type:

JSON object: total record count + WebEOCAuditLog array (see type description)

Examples

Sample JSON Response

Copy Code
{
    "filteredRowCount": 1287,
    "rows": [
        {
            "id": 4821,
            "creationDate": "2026-07-01T13:04:55.000Z",
            "userName": "jdoe",
            "positionName": "EOC Manager",
            "incidentName": "Spring Flood 2026",
            "message": "Login successful",
            "type": "Login"
        }
    ]
}

Errors: 401 (no active session Active login period for a user in WebEOC Nexus, visible to administrators who can view and terminate sessions through Sessions Manager.), 400 (fromDate/toDate missing or not a valid date), 500.

Sample JQuery call (body form):

 

Copy Code
$.ajax({
    async: false,
    contentType: 'application/json',
    type: 'POST',
    url: baseUrl + '/audit-logs',
    headers: { 'X-Paging-Page': '1', 'X-Paging-PageSize': '1000' },
    data: JSON.stringify({
    fromDate: '2026-07-01T00:00:00Z',
        toDate: '2026-07-02T00:00:00Z',
        type: 'Login'
    })
});

Sample JQuery call (query form):

 

Copy Code
$.ajax({
    async: false,
    contentType: 'application/json',
    type: 'POST',
    url: baseUrl + '/audit-logs/query?fromDate=2026-07-01T00:00:00Z&toDate=2026-07-02T00:00:00Z&type=Login',
    headers: { 'X-Paging-Page': '1', 'X-Paging-PageSize': '1000' }
});

C# Call (body form):

Copy Code
var client = new HttpClient();
var request = new HttpRequestMessage(HttpMethod.Post, "baseUrl/api/rest.svc/audit-logs");
request.Headers.Add("X-Paging-Page", "1");
request.Headers.Add("X-Paging-PageSize", "1000");
request.Content = new StringContent("{\"fromDate\":\"2026-07-01T00:00:00Z\",\"toDate\":\"2026-07-02T00:00:00Z\"}", null, "application/json");
var response = await client.SendAsync(request);
response.EnsureSuccessStatusCode();
Console.WriteLine(await response.Content.ReadAsStringAsync());