System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2291
Last 24 hours
105
User actions
54556
Security actions
28658
Approvals & decisions
24642
Config changes
5446
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 06:47:46 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-AB8F7AF5E3', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 06:47:46 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-594C9B2FCC', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 06:47:46 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-E25EEABD23', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 06:47:45 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-CD26AFD166', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 06:47:45 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-2BCFA9BA6A', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 06:19:40 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-1598C31B7F', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:19:40 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-BDB2DD9E1F', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:19:40 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-870F947F35', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:18:34 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-D827384E59', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:18:34 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-C8E32B01A8', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:18:34 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-3C84A2BF3F', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:13:11 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-F79050ED5F', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:13:11 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-A934BAAABE', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:13:11 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-8EBD625495', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:08:53 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-30FBDCA56C', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:08:52 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-2CE9C120F3', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 06:08:52 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-E68C698325', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 05:53:38 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-51859FEA45', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 05:53:38 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-676D4A15BE', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 05:53:38 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-102771FA18', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 05:53:38 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-A00A91C63F', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 05:47:04 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-7AEF9F599C', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 05:47:04 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-8164F1B0FC', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 05:47:04 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-1851D12618', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 05:47:03 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-72EAC6C017', 'policy': 'Persistence & Defense Evasion Response',... |
1 / 1147
Next →
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 06:51:44 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 06:47:46 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-21 06:47:46 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-21 06:47:46 | worker (-) | approval.request.run_hunting_queries | approval | Pending |
| 2026-10-21 06:47:45 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-21 06:47:45 | worker (-) | approval.request.investigate | approval | Pending |
| 2026-10-21 06:47:45 | worker (-) | automation.Persistence & Defense Evasion Response | automation | Matched |
| 2026-10-21 06:46:44 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 06:41:46 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:41:44 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:41:43 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 06:41:43 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:41:40 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:41:40 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:40:53 | worker (-) | cti.ingest | threat_intelligence | Success |
