Go Audit

Querying audit logs is done through typed filter structs rather than raw SQL. Filters translate into parameterized queries using the dialect's placeholder style.

Data Audit Filters

logs, err := auditor.Query(ctx, audit.DataFilter{
    EntityType:    "orders",
    EntityID:      "42",
    Action:        audit.ActionUpdate,
    UserID:        "admin-1",
    TransactionID: "20260418T142318-9f3c2a71c8e4d2b15c90a63e4f712b88",
    DateFrom:      time.Now().Add(-24 * time.Hour),
    DateTo:        time.Now(),
    Limit:         50,
    Offset:        0,
})

Go snippet

Full field list:

type DataFilter struct {
    EntityType    string
    EntityID      string
    Action        string
    UserID        string
    TransactionID string
    DateFrom      time.Time
    DateTo        time.Time
    Limit         int
    Offset        int
}

Go snippet

All fields are optional. Leave a field at its zero value to skip that filter. Non-zero values are combined with AND.

API Call Filters

calls, err := auditor.API().Query(ctx, audit.APIFilter{
    Service:    "bca",
    StatusCode: 500, // only failures
    DateFrom:   time.Now().Add(-1 * time.Hour),
    Limit:      100,
})

Go snippet

Full field list:

type APIFilter struct {
    Service       string
    StatusCode    int
    UserID        string
    TransactionID string
    DateFrom      time.Time
    DateTo        time.Time
    Limit         int
    Offset        int
}

Go snippet

APIFilter intentionally does not expose Method or Endpoint filters — filter on Service plus TransactionID or a date range.

Ordering and Pagination

Default order is id DESC — newest first (matches created_at for normally-inserted rows).
Use Limit + Offset for offset pagination.

page1, _ := auditor.Query(ctx, audit.DataFilter{Limit: 25, Offset: 0})
page2, _ := auditor.Query(ctx, audit.DataFilter{Limit: 25, Offset: 25})

Go snippet

For very large tables, prefer keyset pagination: use DateTo set to the last returned row's CreatedAt to walk forward in time.

Cross-Query by Transaction

For the full picture of one transaction, use QueryByTransaction — it returns the data changes and API calls in a single call.

Action Constants

audit.ActionCreate     // "create"
audit.ActionUpdate     // "update"
audit.ActionDelete     // "delete"
audit.ActionSoftDelete // "soft_delete"
audit.ActionRestore    // "restore"

Go snippet

Query Builder

Data Audit Filters

API Call Filters

Cross-Query by Transaction

Action Constants

On this page