Audit Events
Get request and response bodies
Returns the decrypted LLM request and response bodies of an event. Bodies are captured only when the connection (or the matching rule) logs full content, and only until the retention window passes. Otherwise the response is { "captured": false }.
Required permission: audit:read
GET
Get request and response bodies