---
layout: "http"
page_title: "HTTP API: /sys/audit"
sidebar_current: "docs-http-audits-audits"
description: |-
The `/sys/audit` endpoint is used to enable and disable audit backends.
---
# /sys/audit
## GET
- Description
-
List the mounted audit backends. _This endpoint requires `sudo`
capability._
- Method
- GET
- Parameters
-
None
- Returns
-
```javascript
{
"file": {
"type: "file",
"description: "Store logs in a file",
"options": {
"path": "/var/log/file"
}
}
}
```
## PUT
- Description
-
Enable an audit backend. _This endpoint requires `sudo` capability._
- Method
- PUT
- URL
- `/sys/audit/`
- Parameters
-
-
type
required
The type of the audit backend.
-
description
optional
A description of the audit backend for operators.
-
options
optional
An object of options to configure the backend. This is
dependent on the backend type. Please consult the documentation
for the backend type you intend to use.
- Returns
- `204` response code.
## DELETE
- Description
-
Disable the given audit backend. _This endpoint requires `sudo`
capability._
- Method
- DELETE
- URL
- `/sys/audit/`
- Parameters
- None
- Returns
- `204` response code.