The maximum number of history events to be included in each batch of result set. The default is 25, and the maximum allowed is 100.

Note that the actual number of returned results may be fewer than num; this happens when the number of results remaining is fewer than num.

If the output format is CSV (in other words, f=csv), num is the maximum number of total events to be included in the result CSV file (up to 10,000 records); start no longer applies.

num=50

Used with nextKey from the response to get the next batch of events.

start=eyJjcmVhdGVkIjp7Ik4iOiIxNTM1NjMwMjA1OTI3In0sImlkIjp7IlMiOiIxODhkYzUzMWZkNDI0MWVhYmNhZTllY2ZkNTRjNWU5ZSJ9LCJvcmdJZCI6eyJTIjoiTGtGeXhiOXpEcTd2QU9BbSJ9fQ

If true, all types of events are included. The default is false, with only actions targeted by the organization included (for example, idType is a for all events). Set the parameter to true when the output format is CSV.

Values: true | false

Filter events by specific target user name or target ID in a batch result set. It can be the ID of an item, a group, a role, a collaboration, an identity provider, and so on.

id=jsmith
//or
id=67387f9ead814880bfb1ead7f76e5386

Filter events by a comma-separated list of target types in a batch result set.

Values: a (organization), c (collaboration), cp (collaboration participate), cpg (collaboration participate group), cw (collaboration workspace), cwp (collaboration workspace participate), g (group), i (item), idp (identity provider), inv (invitation), r (role), u (user)

Filter events by a comma-separated list of user names who take the actions in a batch result set.

actors=jsmith,kevinb,andrewo

Filter events by a comma-separated list of user names who own the action targets in a batch result set.

Filter events by a comma-separated list of action types in a batch result set.

Values: add, addusers, create, delete, removeusers, share, unshare, update, login, updateUsers

Filter events starting from a specific time frame in ISO 8601 format or UNIX time in milliseconds.

fromDate=2017-09-01
//or
fromDate=1504249200000

Filter events that occurred before a specific time frame in ISO 8601 format or UNIX time in milliseconds.

Filter events by a comma-separated list of IP addresses in a batch result set.

Describes whether the results return in ascending or descending chronological order. The default is ascending.

Values: asc | desc

The response format. The default format is html.

Values: html | json | pjson | csv

The number of results included in the result set of the response.

num=100

Used to fetch the next batch of events by calling with the start parameter.

A JSON array of event items; each event is detailed with properties described in the Items Properties section.

Example:

[
    {
      "id": "J423vH8fR9HV444l",
      "idType": "a",
      "orgId": "J423vH8fR9HV444l",
      "created": 1454520118902,
      "actor": "mattp",
      "action": "update",
      "ip": "172.16.254.1",
      "request": "/sharing/rest/portals/self/update",
      "reqId": "e92b4effff914fd68430995c95395b7b",
      "appId": "arcgisonline"
    },
    {
      "id": "J423vH8fR9HV444l",
      "idType": "a",
      "orgId": "J423vH8fR9HV444l",
      "created": 1454524502609,
      "actor": "michaelh",
      "action": "update",
      "ip": "172.16.254.1",
      "request": "/sharing/rest/portals/self/update",
      "reqId": "ac8127b5015b491bb337573c1e7fd2f0"
      "appId": "arcgisonline"
    }]

Target user name or ID.

The type of the ID in the id field.

Values: a (organization) | c (collaboration) | cp (collaboration participate) | cpg (collaboration participate group) | cw (collaboration workspace) | cwp (collaboration workspace participate) | g (group) | i (item) | idp (identity provider) | inv (invitation) | r (role) | u (user)

Organization ID.

The owner of the target.

The UNIX time stamp in milliseconds when the event was logged.

The actor of the event.

Type of action.

Values: add | addusers | create | delete | removeusers | share | unshare | update | login | updateUsers

Actor's IP address.

Operation requested by the actor.

/sharing/rest/content/users/jsmith/shareItems

The unique identifier used to identify certain event logs together to indicate them as "one action" triggered by the actor, in other words, removing members from a group also unshares their items from the group, or bulk share multiple items altogether.

eb98161d3a8e40fcb71960480f431abb

ID of the client app where the action was performed on or by the target, for example, a target user signed into ArcGIS Online from ArcGIS Pro.

arcgispro

Request parameter information used to take the action where applicable.

{"everyone":false,"org":true,"groups":[]}