show audit

Ze command

Registry path

show audit

Usage

show audit [action <action>] [actor <actor>] [surface <surface>] [since <since>] [until <until>] [count <count>]

Mode

Read-only

Wire method

ze-show:audit

Backends

any backend

Task support

optional: the MCP call is synchronous, which is the default

Subcommands

none: this command takes no subcommand

Pipes, always

json, ndjson, table, text, yaml, raw, no-more, save

Pipes, when the answer has rows

match, count, first, last, display, fill

Pipes, while streaming

log

Pipes, local process only

save

Description

Returns audit log entries with timestamps, actors, and actions.
Filters (all optional, combinable): action <type>, actor <name>,
surface <name> (cli, web, api), since/until <RFC3339>, count <N>.
Actions include config-commit, login, peer-teardown, and more.

Arguments