Restore archived events

curl --request POST \
  --url https://api.igrisecurity.com/api/v1/audit-events/restore \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "rangeStart": "2026-01-01T00:00:00Z",
  "rangeEnd": "2026-01-08T00:00:00Z"
}
'

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({rangeStart: '2026-01-01T00:00:00Z', rangeEnd: '2026-01-08T00:00:00Z'})
};

fetch('https://api.igrisecurity.com/api/v1/audit-events/restore', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://api.igrisecurity.com/api/v1/audit-events/restore"

payload = {
    "rangeStart": "2026-01-01T00:00:00Z",
    "rangeEnd": "2026-01-08T00:00:00Z"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "data": {
    "jobId": "5e6f7a8b-0000-4000-8000-000000000006",
    "status": "queued",
    "estimatedRows": 48210,
    "estimatedBytes": 10485760,
    "feeCents": 0
  }
}

{
  "error": "Restore range exceeds 365 days"
}

{
  "error": "Unauthorized"
}

{
  "error": "Payment failed"
}

{
  "error": "plan_feature_unavailable",
  "feature": "archive-restore",
  "currentPlan": "starter",
  "upgradeTo": "growth"
}

{
  "error": "No archived data in this range"
}

{
  "error": "rangeStart must be before rangeEnd"
}

{
  "error": "too_many_concurrent_restores",
  "active": 2,
  "max": 2
}