{
  "name": "GetAuditLogs",
  "fully_qualified_name": "DatadogApi.GetAuditLogs@0.1.0",
  "description": "Retrieve events matching an Audit Logs search query.\n\nThis tool calls the Datadog API to retrieve audit log events that match a specified search query. It provides the latest events with pagination support.",
  "toolkit": {
    "name": "ArcadeDatadogApi",
    "description": null,
    "version": "0.1.0"
  },
  "input": {
    "parameters": [
      {
        "name": "audit_logs_search_query",
        "required": false,
        "description": "Search query using Audit Logs syntax to filter events.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "Search query following Audit Logs syntax."
        },
        "inferrable": true,
        "http_endpoint_parameter_name": "filter[query]"
      },
      {
        "name": "start_time_filter",
        "required": false,
        "description": "Specify the minimum timestamp for requested events in the format YYYY-MM-DDTHH:MM:SSZ.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "Minimum timestamp for requested events."
        },
        "inferrable": true,
        "http_endpoint_parameter_name": "filter[from]"
      },
      {
        "name": "max_event_timestamp",
        "required": false,
        "description": "Specify the maximum timestamp for requested events in ISO 8601 format.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "Maximum timestamp for requested events."
        },
        "inferrable": true,
        "http_endpoint_parameter_name": "filter[to]"
      },
      {
        "name": "sort_order_of_events",
        "required": false,
        "description": "Specify the order of events in the results. Use 'timestamp' for ascending and '-timestamp' for descending order.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": [
            "timestamp",
            "-timestamp"
          ],
          "properties": null,
          "inner_properties": null,
          "description": "Order of events in results."
        },
        "inferrable": true,
        "http_endpoint_parameter_name": "sort"
      },
      {
        "name": "cursor_for_following_results",
        "required": false,
        "description": "Cursor to fetch subsequent pages of results. Use the cursor from the previous query's response.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "List following results with a cursor provided in the previous query."
        },
        "inferrable": true,
        "http_endpoint_parameter_name": "page[cursor]"
      },
      {
        "name": "max_events_per_response",
        "required": false,
        "description": "Specifies the maximum number of events to return in the response.",
        "value_schema": {
          "val_type": "integer",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "Maximum number of events in the response."
        },
        "inferrable": true,
        "http_endpoint_parameter_name": "page[limit]"
      }
    ]
  },
  "output": {
    "description": "Response from the API endpoint 'ListAuditLogs'.",
    "available_modes": [
      "value",
      "error",
      "null"
    ],
    "value_schema": {
      "val_type": "json",
      "inner_val_type": null,
      "enum": null,
      "properties": null,
      "inner_properties": null,
      "description": null
    }
  },
  "requirements": {
    "authorization": null,
    "secrets": [
      {
        "key": "DATADOG_API_KEY"
      },
      {
        "key": "DATADOG_APPLICATION_KEY"
      },
      {
        "key": "DATADOG_BASE_URL"
      }
    ],
    "metadata": null
  },
  "deprecation_message": null,
  "metadata": {
    "object_type": "api_wrapper_tool",
    "version": "1.1.0",
    "description": "Tools that enable LLMs to interact directly with the Datadog API."
  },
  "http_endpoint": {
    "metadata": {
      "object_type": "http_endpoint",
      "version": "1.2.0",
      "description": ""
    },
    "url": "https://{datadog_base_url}/api/v2/audit/events",
    "http_method": "GET",
    "headers": {},
    "parameters": [
      {
        "name": "filter[query]",
        "tool_parameter_name": "audit_logs_search_query",
        "description": "Search query following Audit Logs syntax.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "Search query following Audit Logs syntax."
        },
        "accepted_as": "query",
        "required": false,
        "deprecated": false,
        "default": null,
        "documentation_urls": []
      },
      {
        "name": "filter[from]",
        "tool_parameter_name": "start_time_filter",
        "description": "Minimum timestamp for requested events.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "Minimum timestamp for requested events."
        },
        "accepted_as": "query",
        "required": false,
        "deprecated": false,
        "default": null,
        "documentation_urls": []
      },
      {
        "name": "filter[to]",
        "tool_parameter_name": "max_event_timestamp",
        "description": "Maximum timestamp for requested events.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "Maximum timestamp for requested events."
        },
        "accepted_as": "query",
        "required": false,
        "deprecated": false,
        "default": null,
        "documentation_urls": []
      },
      {
        "name": "sort",
        "tool_parameter_name": "sort_order_of_events",
        "description": "Order of events in results.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": [
            "timestamp",
            "-timestamp"
          ],
          "properties": null,
          "inner_properties": null,
          "description": "Order of events in results."
        },
        "accepted_as": "query",
        "required": false,
        "deprecated": false,
        "default": null,
        "documentation_urls": []
      },
      {
        "name": "page[cursor]",
        "tool_parameter_name": "cursor_for_following_results",
        "description": "List following results with a cursor provided in the previous query.",
        "value_schema": {
          "val_type": "string",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "List following results with a cursor provided in the previous query."
        },
        "accepted_as": "query",
        "required": false,
        "deprecated": false,
        "default": null,
        "documentation_urls": []
      },
      {
        "name": "page[limit]",
        "tool_parameter_name": "max_events_per_response",
        "description": "Maximum number of events in the response.",
        "value_schema": {
          "val_type": "integer",
          "inner_val_type": null,
          "enum": null,
          "properties": null,
          "inner_properties": null,
          "description": "Maximum number of events in the response."
        },
        "accepted_as": "query",
        "required": false,
        "deprecated": false,
        "default": 10,
        "documentation_urls": []
      }
    ],
    "documentation_urls": [],
    "secrets": [
      {
        "arcade_key": "DATADOG_API_KEY",
        "parameter_name": "DD-API-KEY",
        "accepted_as": "header",
        "formatted_value": null,
        "description": "",
        "is_auth_token": false
      },
      {
        "arcade_key": "DATADOG_APPLICATION_KEY",
        "parameter_name": "DD-APPLICATION-KEY",
        "accepted_as": "header",
        "formatted_value": null,
        "description": "",
        "is_auth_token": false
      },
      {
        "arcade_key": "DATADOG_BASE_URL",
        "parameter_name": "datadog_base_url",
        "accepted_as": "path",
        "formatted_value": null,
        "description": "",
        "is_auth_token": false
      }
    ],
    "request_body_spec": null,
    "use_request_body_schema_mode": false,
    "validate_request_body_schema": false
  }
}