> ## Documentation Index > Fetch the complete documentation index at: https://docs.corbado.com/llms.txt > Use this file to discover all available pages before exploring further. # Search low-level tracking events by filter criteria > Finds low-level tracking events (raw UI interaction signals) as they were ingested. Provide at least one of `sessionIDs` or `batchIDs`; `types`, `createdAfterMs` and `createdBeforeMs` further narrow the results but cannot be used on their own. Results are ordered as a stable timeline, oldest first (by client capture time), and capped at `limit`. Required API key permission: `observe:events:read`. ## OpenAPI ````yaml /api-reference/openapi/observe.yaml post /observe/trackingEventLowSearch openapi: 3.1.1 info: version: 1.0.0 title: Corbado API description: > # Introduction This documentation gives an overview of all Corbado API calls to implement authentication observe. contact: name: Corbado team email: support@corbado.com url: https://www.corbado.com servers: - url: https://api.cloud.corbado.io/v1 security: - bearerAuth: [] tags: - name: ObserveFlow description: Flow search and related APIs x-group: Journeys and users - name: ObserveSubFlow description: Subflow search and related APIs x-group: Journeys and users - name: ObserveUser description: User search and related APIs x-group: Journeys and users - name: ObserveClientEnv description: Client environment search APIs x-group: Journeys and users - name: ObserveTimeSeries description: Time series query APIs x-group: Metrics and funnels - name: ObserveFunnel description: Historical funnel metrics, dictionaries and coverage. x-group: Metrics and funnels - name: ObserveEvent description: Event ingestion and event feed APIs x-group: Events - name: ObserveError description: Named authentication errors and recommendations. x-group: Error management - name: ObserveErrorFlavour description: Error variants and their impact on authentication outcomes. x-group: Error management - name: ObserveAlert description: Authentication alert rules, instances and history. x-group: Alert management - name: ObserveAnnotation description: Annotation APIs (dated notes for analytics context) x-group: Annotations - name: ObserveTableExport description: Table export file listing and download APIs x-group: Data exports - name: ObserveTimeSeriesExport description: Time-series export generation and downloads. x-group: Data exports - name: ObserveDataExport description: Data export APIs x-group: User data - name: ObserveDataDeletionJob description: Data deletion job APIs x-group: User data - name: ObserveFlowTypeDefinition description: Flow type definitions used in authentication journeys. x-group: Catalogs and labels - name: ObserveCatalog description: Catalog APIs x-group: Catalogs and labels - name: OpenAPI description: Downloadable API specification - name: ProjectOperationExecution description: Project-scoped operation history and pipeline health - name: ObserveClassification description: Flow and subflow classification APIs - name: ObserveIntegrationStats description: Integration stats APIs - name: ObserveTimeSeriesPrecalculation description: Time series precalculation APIs - name: ObserveIDList x-group: Saved ID lists description: Stored ID-list selection APIs - name: ObserveDataContext description: Schema-loose data context APIs for agent and debugging tooling - name: ObserveData description: Observe data administration APIs - name: ObserveTrackingStats description: Tracking ingestion stats APIs - name: ObserveExperiment x-group: Experiments description: Experiment catalog and run APIs - name: ObserveDataPolicy description: >- Project data policy catalogue (retention selected by the SDK's meta.dataPolicy code) - name: ObserveMetadata x-group: Metadata description: Authenticator metadata APIs (FIDO MDS + passkey AAGUID) - name: ObservePasskey x-group: Passkey analysis description: Observed passkey search and cohort analysis. paths: /observe/trackingEventLowSearch: post: tags: - ObserveEvent summary: Search low-level tracking events by filter criteria description: >- Finds low-level tracking events (raw UI interaction signals) as they were ingested. Provide at least one of `sessionIDs` or `batchIDs`; `types`, `createdAfterMs` and `createdBeforeMs` further narrow the results but cannot be used on their own. Results are ordered as a stable timeline, oldest first (by client capture time), and capped at `limit`. Required API key permission: `observe:events:read`. operationId: ObserveTrackingEventLowSearch requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/observeTrackingEventLowSearchReq' responses: '200': description: Matching low-level tracking events. content: application/json: schema: $ref: '#/components/schemas/observeTrackingEventLowSearchRsp' default: $ref: '#/components/responses/error' security: - bearerAuth: - observe:events:read components: schemas: observeTrackingEventLowSearchReq: type: object properties: sessionIDs: type: array description: Public session UUIDs to fetch low-level tracking events for. items: type: string x-oapi-codegen-extra-tags: validate: omitempty,min=1,max=500,dive,uuid batchIDs: type: array description: >- Tracking event batch IDs to fetch low-level tracking events for (format `teb-`). items: type: string x-oapi-codegen-extra-tags: validate: omitempty,min=1,max=500,dive,id=teb types: type: array description: Optional low-level tracking event types to include. items: $ref: '#/components/schemas/observeTrackingEventLowType' x-oapi-codegen-extra-tags: validate: >- omitempty,min=1,dive,oneof=focus blur click pointerdown pointerup keyup-escape input big-input-add big-input-paste big-input-rem input-idle input-prefill input-clear input-paste window-navigate-back window-focus window-blur visualviewport-resize visualviewport-scroll document-visibilitychange-hidden document-visibilitychange-visible pwm-1pwd-button pwm-1pwd-menu pwm-1pwd-notification pwm-lastpass pwm-bitwarden pwm-icloud-passwords page-ready createdAfterMs: type: integer format: int64 description: >- Inclusive lower bound on client capture time in milliseconds since epoch. x-oapi-codegen-extra-tags: validate: omitempty,min=0 createdBeforeMs: type: integer format: int64 description: >- Exclusive upper bound on client capture time in milliseconds since epoch. x-oapi-codegen-extra-tags: validate: omitempty,min=0 limit: type: integer description: >- Maximum number of low-level tracking events to return. Defaults to 100, maximum 10000. default: 100 minimum: 1 maximum: 10000 x-oapi-codegen-extra-tags: validate: omitempty,min=1,max=10000 observeTrackingEventLowSearchRsp: type: object required: - trackingEventLows properties: trackingEventLows: type: array description: >- Matching low-level tracking events in stable timeline order, oldest first, capped at `limit`. items: $ref: '#/components/schemas/observeTrackingEventLowSearchEntry' observeTrackingEventLowType: type: string description: Type of a low-level tracking event. enum: - focus - blur - click - pointerdown - pointerup - keyup-escape - input - input-idle - big-input-add - big-input-paste - input-prefill - input-clear - input-paste - window-navigate-back - big-input-rem - window-focus - window-blur - visualviewport-resize - visualviewport-scroll - document-visibilitychange-hidden - document-visibilitychange-visible - pwm-1pwd-button - pwm-1pwd-menu - pwm-1pwd-notification - pwm-lastpass - pwm-bitwarden - pwm-icloud-passwords - page-ready observeTrackingEventLowSearchEntry: type: object required: - id - sessionID - batchID - type - createdMs - durationMs properties: captureSeq: type: integer format: int64 minimum: 0 maximum: 4294967295 description: >- Unsigned per-page capture order, reserved at observation start and retained through retries. Zero or missing means unavailable. captureVersion: type: integer format: int32 clientEventID: type: string subflowStartEventId: type: string pageID: type: string sourceKind: type: string fieldRole: type: string initiator: type: string inputEffect: type: string id: type: string description: Low-level tracking event ID (format `tel-`). sessionID: type: string description: Public session UUID. batchID: type: string description: >- Tracking event batch ID of the ingestion request this low-level event arrived with (format `teb-`). type: $ref: '#/components/schemas/observeTrackingEventLowType' createdMs: type: integer format: int64 description: >- Client capture time in milliseconds since epoch, corrected against the batch send time. durationMs: type: integer format: int64 description: >- Duration of the low-level tracking event in milliseconds, 0 when the client reported none. errorRspV2: type: object required: - error properties: error: type: object required: - message properties: message: description: Error message type: string example: Validation failed details: description: Validation error details per field type: array items: type: object required: - field - message properties: field: description: Field name that failed validation type: string example: projectID message: description: Validation error message type: string example: required responses: error: description: Error content: application/json: schema: $ref: '#/components/schemas/errorRspV2' securitySchemes: bearerAuth: type: http scheme: bearer description: >- Use an Observe API key from the management console. The key selects the project and must grant the permission listed on the operation. Keep this key on your server. ````