Litmus Edge Manager 3.0.x - Admin Console: Action Log
Returns current action log migration status
GET {{LEM_adminURL}}/admin/v1/action-log/migration
Returns current action log migration status
Reports the status of the action-log migration (the one-time move of action-log data to its 2.34 storage). Check this after upgrading to confirm the migration completed.
Endpoint
GET {{LEM_adminURL}}/admin/v1/action-log/migration
Authentication
API key in a request header (case sensitive). The value is the LEM admin API token.
| URL prefix | Auth header |
|---|---|
{{LEM_URL}}/api/v1/... (main fleet API) |
X-AuthToken: <token> |
{{LEM_adminURL}}/admin/v1/... (admin console, port 8446) |
X-AuthToken: <token> |
{{LEM_URL}}/mpcs/... (Marketplace Catalog) |
Authorization: <token> (3.0.x also accepts X-AuthToken) |
| ## Response |
ActionLogMigrationResponse (migration state and progress).
Errors
| HTTP status | When it happens |
|---|---|
400 Bad Request |
Missing or malformed query/body parameter. |
401 Unauthorized |
Missing or invalid credentials. |
403 Forbidden |
Token lacks permission for this operation. |
404 Not Found |
Target entity does not exist. |
5xx |
Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support. |
TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.
Response
Status: 200 OK
{
"status": "completed",
"startedAt": 1781559354657,
"completedAt": 1781559355772,
"cursor": null,
"windowStart": 1778967354265,
"windowEnd": 1781559354265,
"estimatedProgressPct": 100
}
Retries a failed action log migration
POST {{LEM_adminURL}}/admin/v1/action-log/migration/retry
Retries a failed action log migration
Restarts the action-log migration if it previously failed. Safe to call when the status reports a failure.
Endpoint
POST {{LEM_adminURL}}/admin/v1/action-log/migration/retry
Authentication
API key in a request header (case sensitive). The value is the LEM admin API token.
| URL prefix | Auth header |
|---|---|
{{LEM_URL}}/api/v1/... (main fleet API) |
X-AuthToken: <token> |
{{LEM_adminURL}}/admin/v1/... (admin console, port 8446) |
X-AuthToken: <token> |
{{LEM_URL}}/mpcs/... (Marketplace Catalog) |
Authorization: <token> (3.0.x also accepts X-AuthToken) |
| ## Response |
ApiResponse ({ code, message }).
Errors
| HTTP status | When it happens |
|---|---|
400 Bad Request |
Missing or malformed query/body parameter. |
401 Unauthorized |
Missing or invalid credentials. |
403 Forbidden |
Token lacks permission for this operation. |
404 Not Found |
Target entity does not exist. |
5xx |
Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support. |
TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.
Returns current action log retention settings and live storage usage
GET {{LEM_adminURL}}/admin/v1/action-log/settings
Returns current action log retention settings and live storage usage
Returns the current action-log retention policy together with live storage usage, so you can size retention against disk.
Endpoint
GET {{LEM_adminURL}}/admin/v1/action-log/settings
Authentication
API key in a request header (case sensitive). The value is the LEM admin API token.
| URL prefix | Auth header |
|---|---|
{{LEM_URL}}/api/v1/... (main fleet API) |
X-AuthToken: <token> |
{{LEM_adminURL}}/admin/v1/... (admin console, port 8446) |
X-AuthToken: <token> |
{{LEM_URL}}/mpcs/... (Marketplace Catalog) |
Authorization: <token> (3.0.x also accepts X-AuthToken) |
| ## Response |
ActionLogSettingsResponse (retention settings + current storage usage).
Errors
| HTTP status | When it happens |
|---|---|
400 Bad Request |
Missing or malformed query/body parameter. |
401 Unauthorized |
Missing or invalid credentials. |
403 Forbidden |
Token lacks permission for this operation. |
404 Not Found |
Target entity does not exist. |
5xx |
Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support. |
TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.
Response
Status: 200 OK
{
"retentionPeriod": "30d",
"retentionMaxDiskSpaceUsageBytes": 10737418240,
"storage": {
"usedBytes": 16788,
"usedHuman": "16.39 KB",
"limitBytes": 10737418240,
"limitHuman": "10.00 GB",
"dataPath": "/var/lib/lem/victorialogs",
"available": true
}
}
Updates action log retention settings
PUT {{LEM_adminURL}}/admin/v1/action-log/settings
Updates action log retention settings
Updates the action-log retention policy (how long action-log records are kept).
Endpoint
PUT {{LEM_adminURL}}/admin/v1/action-log/settings
Authentication
API key in a request header (case sensitive). The value is the LEM admin API token.
| URL prefix | Auth header |
|---|---|
{{LEM_URL}}/api/v1/... (main fleet API) |
X-AuthToken: <token> |
{{LEM_adminURL}}/admin/v1/... (admin console, port 8446) |
X-AuthToken: <token> |
{{LEM_URL}}/mpcs/... (Marketplace Catalog) |
Authorization: <token> (3.0.x also accepts X-AuthToken) |
| ## Request body |
ActionLogSettingsRequest with the new retention settings.
Response
ApiResponse ({ code, message }).
Errors
| HTTP status | When it happens |
|---|---|
400 Bad Request |
Missing or malformed query/body parameter. |
401 Unauthorized |
Missing or invalid credentials. |
403 Forbidden |
Token lacks permission for this operation. |
404 Not Found |
Target entity does not exist. |
5xx |
Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support. |
TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.
Request Body
{
"retentionPeriod": "30d",
"retentionMaxDiskSpaceUsageBytes": 10737418240
}
Get API Activity Settings
GET {{LEM_adminURL}}/admin/v1/action-log/settings/api-activity
New in 2.35.
Get API Activity Settings
Returns how long the API-activity log (the per-request log behind Get API Activity Records) is kept, and how much disk it uses. It is retained separately from the business audit trail, whose settings are under Returns current action log retention settings and live storage usage.
Endpoint
GET {{LEM_adminURL}}/admin/v1/action-log/settings/api-activity
Authentication
API key in a request header (case sensitive). The value is the LEM admin API token.
| URL prefix | Auth header |
|---|---|
{{LEM_URL}}/api/v1/... (main fleet API) |
X-AuthToken: <token> |
{{LEM_adminURL}}/admin/v1/... (admin console, port 8446) |
X-AuthToken: <token> |
{{LEM_URL}}/mpcs/... (Marketplace Catalog) |
Authorization: <token> (3.0.x also accepts X-AuthToken) |
| ## Response |
| Field | Description |
|---|---|
retentionPeriod |
How long records are kept: Nd, Nmo or Ny (e.g. 7d). |
retentionMaxDiskSpaceUsageBytes |
Disk cap in bytes. |
storage.usedBytes / storage.usedHuman |
Current usage. |
storage.limitBytes / storage.limitHuman |
Effective cap. |
storage.dataPath, storage.available |
Where the log store lives and whether it is reachable. |
{
"retentionPeriod": "7d",
"retentionMaxDiskSpaceUsageBytes": 5368709120,
"storage": {
"usedBytes": 306599,
"usedHuman": "299.41 KB",
"limitBytes": 5368709120,
"limitHuman": "5.00 GB",
"dataPath": "/var/lib/lem/victorialogs",
"available": true
}
}
Errors
| HTTP status | When it happens |
|---|---|
400 Bad Request |
Missing or malformed query/body parameter. |
401 Unauthorized |
Missing or invalid credentials. |
403 Forbidden |
Token lacks permission for this operation. |
404 Not Found |
Target entity does not exist. |
5xx |
Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support. |
TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.
Response
Status: 200 OK
{
"retentionPeriod": "7d",
"retentionMaxDiskSpaceUsageBytes": 5368709120,
"storage": {
"usedBytes": 313999,
"usedHuman": "306.64 KB",
"limitBytes": 5368709120,
"limitHuman": "5.00 GB",
"dataPath": "/var/lib/lem/victorialogs",
"available": true
}
}
Update API Activity Settings
PUT {{LEM_adminURL}}/admin/v1/action-log/settings/api-activity
New in 2.35.
Update API Activity Settings
Sets the retention period and disk cap of the API-activity log.
Endpoint
PUT {{LEM_adminURL}}/admin/v1/action-log/settings/api-activity
Authentication
API key in a request header (case sensitive). The value is the LEM admin API token.
| URL prefix | Auth header |
|---|---|
{{LEM_URL}}/api/v1/... (main fleet API) |
X-AuthToken: <token> |
{{LEM_adminURL}}/admin/v1/... (admin console, port 8446) |
X-AuthToken: <token> |
{{LEM_URL}}/mpcs/... (Marketplace Catalog) |
Authorization: <token> (3.0.x also accepts X-AuthToken) |
| ## Request body |
| Field | Type | Description |
|---|---|---|
retentionPeriod |
string | Nd, Nmo or Ny, e.g. 7d, 3mo, 1y. |
retentionMaxDiskSpaceUsageBytes |
integer | Disk cap in bytes. |
{
"retentionPeriod": "7d",
"retentionMaxDiskSpaceUsageBytes": 5368709120
}
Response
ApiResponse { code, message, messageDetails }.
Errors
| HTTP status | When it happens |
|---|---|
400 Bad Request |
Missing or malformed query/body parameter. |
401 Unauthorized |
Missing or invalid credentials. |
403 Forbidden |
Token lacks permission for this operation. |
404 Not Found |
Target entity does not exist. |
5xx |
Service is unreachable, restarting, or internally errored. Inspect device logs under System > Support. |
TLS note: edge devices use a self-signed certificate by default. Either install the device CA in your client trust store or disable certificate verification when calling this endpoint directly.
Request Body
{
"retentionPeriod": "30d",
"retentionMaxDiskSpaceUsageBytes": 10737418240
}