# Get the audit log's filters

`GET /app/audit-log/filters`

The categories, actions and actors the log can be filtered by.

Scope: `audit:read`.

## Example

```bash
curl -X GET "https://api.fortwatch.ai/app/audit-log/filters" \
  -H "Authorization: Bearer $FORTWATCH_API_KEY"
```

## Response 200

The request succeeded.

- `categories` (object[], required)
  - `key` (string, required)
  - `label` (string, required)
- `actions` (object[], required)
  - `key` (string, required)
  - `category` (string, required)
  - `text` (string, required): The catalogue sentence, placeholders included
- `actors` (object[], required)
  - `key` (string, required)
  - `label` (string, required)
- `retentionDays` (number, required)

```json
{
  "categories": [
    {
      "key": "string",
      "label": "string"
    }
  ],
  "actions": [
    {
      "key": "string",
      "category": "string",
      "text": "string"
    }
  ],
  "actors": [
    {
      "key": "string",
      "label": "string"
    }
  ],
  "retentionDays": 1
}
```

## Errors

- 400: The request is not valid: a field is missing or has the wrong shape (the message names it).
- 401: No valid credentials: the API key or access token is missing, revoked or expired (INVALID_API_KEY, INVALID_TOKEN).
- 403: Not allowed: the key or token lacks this scope (SCOPE_REQUIRED), the route is dashboard-only (SESSION_REQUIRED), or a plan limit applies.
- 429: Too many requests (RATE_LIMITED): wait the seconds Retry-After gives.