Rate limit on audit events API

• Tier: Premium, Ultimate
• Offering: GitLab Self-Managed, GitLab Dedicated

Version history

• Introduced in GitLab 19.4 for the instance audit events API.
• Introduced in GitLab 19.5 for the project audit events API.
• Introduced in GitLab 19.5 for the group audit events API.

You can configure rate limits for requests to three APIs:

• The instance audit events API. The rate limit is per minute per user. The default is 200.
• The group audit events API. The rate limit is per minute per user per group. The default is 200.
• The project audit events API. The rate limit is per minute per user per project. The default is 200.

Requests over any of these rate limits return a 429 Too Many Requests status code and are logged into the auth.log file.

• The instance audit events API rate limit applies to both GET /audit_events and GET /audit_events/:id.
• The group audit events API rate limit applies to both GET /groups/:id/audit_events and GET /groups/:id/audit_events/:audit_event_id.
• The project audit events API rate limit applies to both GET /projects/:id/audit_events and GET /projects/:id/audit_events/:audit_event_id.

For example, if you set a limit of 200, requests to these endpoints that exceed a rate of 200 within one minute are blocked. Access is restored after one minute.

Change the rate limits

Prerequisites:

• Administrator access.

To change a rate limit:

1. In the upper-right corner, select Admin.
2. In the left sidebar, select Settings > Network.
3. Expand Audit events API rate limits.
4. Change the value of the rate limit you want to update. To disable a rate limit, set the value to 0.
5. Select Save changes.