Audit Logs
Omni Datastream records every API interaction as a traceable event. Audit surfaces are available through four endpoint families: request diagnostics, event listing and export, delivery summaries, and observability exports. All endpoints require org-scoped authentication via API key or bearer token.Request Diagnostics
GET /v1/diagnostics/requests/:requestId
Drill into a single request using theRequest-Id header value returned in every API response.
- usage events recorded for the request
- canonical events emitted (e.g.,
artifact.created,webhook_endpoint.created) - webhook delivery attempts triggered by the request
- stream events published to active subscriptions
- artifacts generated or referenced
- grouped counts by meter class and event type
Request-Id.
GET /v1/diagnostics/deliveries/summary
Aggregate webhook and stream delivery activity over a time window.| Parameter | Type | Default | Description |
|---|---|---|---|
since | ISO 8601 string | none | Start of the time window |
limit | integer | 200 | Maximum number of records |
- identify which webhook destinations are failing
- detect event types that are replaying frequently
- confirm stream polling activity is flowing as expected
Event Export
GET /v1/events
List recent events with filtering. Returns a paginated list.| Parameter | Type | Default | Description |
|---|---|---|---|
kind | string | none | Filter by event kind (e.g., event, webhook_delivery) |
type | string | none | Filter by event type (e.g., artifact.created, webhook_endpoint.created) |
requestId | string | none | Filter to events from a specific request |
since | ISO 8601 string | none | Start of the time window |
limit | integer | 25 | Maximum number of records |
GET /v1/events/export
Export events in JSON or NDJSON format for ingestion into external systems.| Parameter | Type | Default | Description |
|---|---|---|---|
kind | string | none | Filter by event kind |
type | string | none | Filter by event type |
requestId | string | none | Filter to events from a specific request |
since | ISO 8601 string | none | Start of the time window |
limit | integer | 100 | Maximum number of records |
format | json or ndjson | json | Output format |
application/x-ndjson) returns one JSON object per line. Use this when downstream tooling expects line-oriented ingestion (Splunk, Datadog, ELK, or custom log pipelines).
Observability
GET /v1/observability
Returns the current observability configuration. No secrets are exposed.- which providers are configured at the environment level
- whether usage and webhook event logs are enabled
- the current quota table used by the API layer
GET /v1/observability/export
Bundles observability config, usage summary, billing health, and recent events into a single response.| Parameter | Type | Default | Description |
|---|---|---|---|
limit | integer | 20 | Maximum number of recent events to include |
Usage Tracking
GET /v1/usage
Returns metered usage events grouped by meter class for the current billing period.light_reads, standard_reads, heavy_extracts, artifact_jobs, delivery_events, intelligence_queries, market_data_reads.
GET /v1/limits
Returns rate limits, API key limits, and throughput ceilings for the current plan.GET /v1/billing
Returns the full billing snapshot: plan key, billing state, spend caps, budget alerts, and Stripe subscription status.Compliance Integration Patterns
SIEM export
Use the NDJSON event export to feed events into a SIEM pipeline:Budget audit trail
Budget changes are recorded with the acting principal, previous values, and request ID. Query the event log forbudget.updated events to reconstruct the change history.
Request traceability
Every API response includesRequest-Id and traceparent headers. Preserve these in your application logs to correlate downstream effects with the originating request.
Endpoint summary
| Endpoint | Method | Description |
|---|---|---|
/v1/diagnostics/requests/:requestId | GET | Request-scoped diagnostic drilldown |
/v1/diagnostics/deliveries/summary | GET | Aggregated delivery activity |
/v1/events | GET | Filtered event listing |
/v1/events/export | GET | JSON or NDJSON event export |
/v1/observability | GET | Observability configuration |
/v1/observability/export | GET | Bundled observability export |
/v1/usage | GET | Metered usage summary |
/v1/limits | GET | Plan limits and rate ceilings |
/v1/billing | GET | Full billing snapshot |
Read next
Enterprise Features
SSO, key rotation, multi-seat organizations, and commercial licensing.
Request Diagnostics
Detailed guide for request-scoped investigation.
Event Export
Filtering, JSON, and NDJSON export workflows.