ChatGPT Enterprise Conversation Messages

Retrieve prompts and model replies from the ChatGPT Enterprise service.

chatgpt-ent-chat-logs [profile=VALUE] [duration=VALUE] [from=VALUE] [to=VALUE] [user=VALUE] [conversation-id=VALUE]

profile=VALUE: Optional. Profile name of the ChatGPT Enterprise workspace.
duration=VALUE: Optional. Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example, 10s means data from 10 seconds earlier. The API requires a start time, so the last 24 hours are used when no period is given.
from=VALUE: Optional. Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
to=VALUE: Optional. End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
user=VALUE: Optional. Filter by the email of the user who caused the event.
conversation-id=VALUE: Optional. Filter by conversation id, to read one thread.

Output fields

Field	Type	Name	Description
_time	Date	Time	e.g. 2026-09-05 09:13:44. When the event occurred.
profile	String	Connect profile	e.g. workspace-prod
user	String	User	e.g. user@example.com
author_type	String	Author type	e.g. user (the person), assistant (the model)
model	String	Model	e.g. gpt-5-6. Present on assistant messages.
conversation_title	String	Conversation title	e.g. Unique Domain Extraction
conversation_id	String	Conversation ID	e.g. 2b3c4d5e-6f70-4819-a2b3-c4d5e6f70819
message_id	String	Message ID	e.g. 4d5e6f70-8192-4a3b-8c4d-5e6f70819203
content_length	Long	Content length	e.g. 1596
content	String	Content	e.g. extract urls if contains *.exe in given urls. The instruction can sit at the end of a long message, so read the whole value rather than its opening.
file_count	Long	Attachment count	e.g. 2
file_names	String	Attachment names	e.g. report.pdf, notes.txt
file_ids	String	Attachment IDs	e.g. file_000000001a2b3c4d5e6f708192a3b4c5. The same attachment keeps this id across messages.
gpt_name	String	GPT name	e.g. Security Analyst
project_name	String	Project name	e.g. Finance Team
is_temporary_chat	Boolean	Temporary chat	e.g. false. A temporary chat is not kept in the user's history.
client_type	String	Client type	e.g. desktop_web. Present on user messages.
content_type	String	Content type	e.g. text
previous_message_id	String	Previous message ID	e.g. 5e6f7081-9203-4b4c-9d5e-6f7081920314. Links the thread in order.
message_created	Date	Message created	e.g. 2026-08-29 23:08:30
conversation_mode	String	Conversation mode	e.g. chat
conversation_created	Date	Conversation created	e.g. 2026-08-07 23:32:21. When the thread was started, which can long predate this message.
is_pinned	Boolean	Pinned	e.g. false
gpt_id	String	GPT ID	e.g. g-4f2c1b8a
project_id	String	Project ID	e.g. proj-finance-001
annotations	List	Annotations	e.g. [{url=..., title=...}]. Web sources the reply cited.
type	String	Event type	e.g. CONVERSATION_MESSAGE
event_id	String	Event ID	e.g. 3c4d5e6f-7081-49a2-b3c4-d5e6f7081920
user_id	String	User ID	e.g. user-AbCdEfGhIjKlMnOpQrStUvWx
actor_type	String	Actor type	e.g. ACCOUNT_USER
principal_id	String	Workspace ID	e.g. 9a8b7c6d-1e2f-4a3b-8c4d-5e6f70819a2b
principal_type	String	Workspace type	e.g. CHATGPT_WORKSPACE
file_id	String	Log file ID	e.g. eclf_0a1b2c3d4e5f60718293a4b5c6d7e8f9. Compliance log file the event was read from.
extra	Map	Unmapped fields	e.g. {new_field=...}. Fields this app does not recognise yet, kept so nothing is lost when the API adds them.
src_ip	IP	Source IP	e.g. 203.0.113.10
src_country	String	Source country	e.g. KR
src_city	String	Source city	e.g. Seoul
src_region	String	Source region	e.g. Seoul
src_asn	String	Source ASN	e.g. 4766
user_agent	String	User agent	e.g. Mozilla/5.0
ja3	String	JA3 fingerprint	e.g. a1b2c3d4e5f60718293a4b5c6d7e8f90. TLS client fingerprint; a change can mean a different client.
ja4	String	JA4 fingerprint	e.g. q13d0314h3_a1b2c3d4e5f6_0a1b2c3d4e5f
dst_host	String	Destination host	e.g. chatgpt.com