---
title: "POST /_system/user-activity/search - User Activity · RUAL Documentation"
description: "Search user activity logs using request body (requires setting_user_activity_view permission)"
canonical: https://docs.rual.nl/cluster/api/user-activity/system-user-activity-search-post
language: en
---

# POST /_system/user-activity/search

Search user activity logs using request body (requires setting_user_activity_view permission)

| Key | Type | Example | Description |
| --- | --- | --- | --- |
| **[authorization](https://docs.rual.nl/cluster/api#token-providing)** required | `string` | `"Bearer access_token"` | Access token |

| Key | Type | Example | Description |
| --- | --- | --- | --- |
| **count** optional | `boolean` | `4` | Return count instead of results |
| **filters** optional | `object` | {} | Additional search filters |
| **limit** optional | `integer` | `50` | Maximum number of results |
| **offset** optional | `integer` | `0` | Number of results to skip |
| **query** optional | `string` | `"example"` | Search query string |
| **sort** optional | `array` | [{}] |  |

```
{}
```

```
{
  "error": "INSUFFICIENT_PERMISSIONS"
}
```

| Status | Error Code | Description |
| --- | --- | --- |
| `401` | `INSUFFICIENT_PERMISSIONS` | Insufficient permissions |

| Permission | Description |
| --- | --- |
| `Bearer token` | Access token required via Authorization header, x-authtoken, x-token, query param, or cookie |
| `user_activity_view` | Required scope: user_activity_view |
