# List a ticket's audit log

`GET https://evohub.io/api/v1/support/tickets/{id}/audit-logs`

Part of the [Support API](https://docs.evohub.io/support.md) reference · operationId `listTicketAuditLogs`.

What happened to one of the caller's tickets, newest first, at most
100 entries: `ticket.created`, `message.added`, and the changes
EvoHub support made (`status.changed`, `priority.changed`). An entry
written by support has `actor_type` `admin` and `user_id` `admin`.

`data` is `[]` when the ticket has no entries yet.

Requires no scope.

## Authorization

Any one of:

- `bearerKey`
- `headerKey`

Where:

- `bearerKey`: HTTP Bearer — An EvoHub API key (`evohub_…`) as a bearer token.
- `headerKey`: API key in the header `X-API-Key` — An EvoHub API key (`evohub_…`).

## Path parameters

- `id` (string, required, example `tkt_3f9a1c2e7b5d4a60`): The ticket's ID.

## Responses

### 200 — The ticket's audit entries.

Content type: `application/json`

Type: `AuditLogList`

- `success` (boolean, value `true`)
- `data` (array of AuditLog)
  - `id` (string, example `aud_1a2b3c4d5e6f7a8b`)
  - `org_id` (string)
  - `user_id` (string): Who acted; `admin` for EvoHub support.
  - `resource_type` (string, value `ticket`)
  - `resource_id` (string): The ticket's ID.
  - `action` (string, one of `ticket.created`, `message.added`, `status.changed`, `priority.changed`)
  - `actor_type` (string, one of `user`, `admin`)
  - `details` (object): What changed: `subject`, `type` and `priority` for `ticket.created`; `message_id` for `message.added`; `status` or `priority` for the changes. Left out when empty.
    - Other keys: any
  - `created_at` (string (date-time))

### 401 — No API key was sent, or it is unknown, revoked or expired (`UNAUTHORIZED`).

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Support; the gateway's own refusals leave it out.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `ticket not found`)
  - `request_id` (string)

### 404 — The ticket does not exist, or it is not one of the caller's own (`NOT_FOUND`).

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Support; the gateway's own refusals leave it out.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `ticket not found`)
  - `request_id` (string)

### 429 — Too many requests (`RATE_LIMITED`). Wait for `Retry-After` seconds.

Headers:

- `Retry-After` (integer): Seconds to wait before retrying.

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Support; the gateway's own refusals leave it out.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `ticket not found`)
  - `request_id` (string)

### 500 — Something went wrong on EvoHub's side (`INTERNAL_ERROR`). Retry later.

Content type: `application/json`

Type: `Error`

- `success` (boolean, value `false`): Sent by Support; the gateway's own refusals leave it out.
- `error` (object, required)
  - `code` (string, required, example `NOT_FOUND`)
  - `message` (string, required, example `ticket not found`)
  - `request_id` (string)

## Example request

```bash
curl -X GET 'https://evohub.io/api/v1/support/tickets/tkt_3f9a1c2e7b5d4a60/audit-logs' \
  -H 'Authorization: Bearer <TOKEN>'
```