Starts a CSV export of the workspace's IP allowlist decision log and answers 202 with the export id and the range it covers. Poll the export until it is READY.

One export runs per workspace at a time: a 409 carries the in-flight export's id. Ranges are capped at 31 days. An absent until defaults to now, and an until beyond the completeness watermark is clamped to it; the response's until is the resolved end. A since at or beyond the watermark is a 422 carrying complete_up_to.

The CSV columns are v, event_id, ts, kind, team_id, subject_kind, subject_id, request_id, method, route_class, route_template, user_agent, user_id, reason, mode, matched_cidr, src_ip, error, entries, configured_by, change, list_id.

🚧

Enterprise beta

This is a Beta feature available only to enrolled Enterprise workspaces, and only to workspace admins. Contact Dovetail support to request access.

Required scope: audit_logs:read