# avr audit-events View audit events for organization writes. ```sh avr audit-events [OPTIONS] COMMAND [ARGS]... ``` ## Subcommands ### `avr audit-events list` List audit events for the organization. ```sh avr audit-events list [OPTIONS] ``` ```sh JSON FIELDS acting_api_key_id, action, actor_type, actor_user_id, client_ip, created_at, event_data, event_id, resource_id, resource_type ``` **Options** - --org <TEXT> — Organization ID. Uses default org if not specified (see: avr config set org). - --resource-type <TEXT> — Filter by resource type (e.g. api_key, user). - --action <TEXT> — Filter by action (CREATE, UPDATE, DELETE, ...). - --actor-user-id <TEXT> — Filter by acting user id. - --from, --created-after <TEXT> — ISO-8601 lower bound (inclusive) on created_at. - --to, --created-before <TEXT> — ISO-8601 upper bound (exclusive) on created_at. - -L, --limit <INTEGER RANGE> — Max events to return. _(default: `100`)_ - --cursor <TEXT> — Opaque cursor from a previous response's next_cursor. - --json <TEXT> — Output JSON. Pass comma-separated field names, "*" for all fields, or "?" to list available fields. - -q, --jq <TEXT> — Filter --json output through a jq expression.