# sdm audit ```shell NAME: sdm audit - administrative audit commands USAGE: sdm audit command [command options] [arguments...] COMMANDS: activities extracts the activity log with optional support for following the live log resources extract resource settings at a specific timestamp nodes, node, relay, relays extract node settings at a specific timestamp granted-entitlements extract granted entitlements at a specific timestamp requestable-entitlements extract requestable entitlements at a specific timestamp permissions extract user permissions at a specific timestamp queries extracts the query log with optional support for following the live log ssh extracts SSH captures with optional support for following the live log rdp extracts RDP captures with optional support for following the live log kubernetes, k8s extracts kubernetes logs with optional support for following the live log web, http extracts web logs with optional support for following the live log cloud extracts cloud logs with optional support for following the live log tokens extract admin tokens listing at a specific timestamp users extract user listing at a specific timestamp roles extract roles listing at a specific timestamp groups extract groups listing at a specific timestamp accountsgroups extract accountsgroups listing at a specific timestamp groupsroles extract groupsroles listing at a specific timestamp workflows extract workflows listing at a specific timestamp workflow-roles extract workflow roles listing at a specific timestamp workflow-approvers extract workflow approvers listing at a specific timestamp access-requests extract access-request listing at a specific timestamp approval-workflows-multistep extract approval workflows, approval workflow steps, and approval workflow approvers listing at a specific timestamp policies extract policies listing at a specific timestamp OPTIONS: --help, -h show help ``` --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.strongdm.com/references/cli/audit.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.