Right now, the audit log only shows the latest 1000 records, and filtering applies only within those 1000. We’re planning to add an API route so that when a user filters, the frontend will send the filter to the backend, which will search across the entire audit log - not just the last 1000 entries.

The result will still show up to 1000 entries, but filtered from the full log. So for example, if a user filters by “fails,” they’ll get the latest 1000 fails overall, rather than fails just within the latest 1000 records.