System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2118
Last 24 hours
106
User actions
55824
Security actions
29385
Approvals & decisions
25269
Config changes
5579
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 07:21:54 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-D450AE9BB4', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 07:07:55 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-F7EC86A790', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 07:07:55 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-97CD9E68E5', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 07:07:55 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-13580DB6FF', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 07:07:55 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-98E2A8E8C5', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 07:07:55 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-22AD0AB820', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 06:43:06 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-3679CA7C5F', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:05 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-B89E86B8EB', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:05 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-A09E3EDD60', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:05 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-4B6E87F8CC', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:05 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-0AB1669ACC', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:05 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-65214C672F', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:03 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-78FE16FA56', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:03 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-FA318591A2', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:03 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-0D748E6B6A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:02 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-1C72122F87', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:02 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-7CAE12FB95', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:43:02 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-83538EE99C', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 06:21:19 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-96B93A7302', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 06:21:19 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-F411CC188F', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 06:21:18 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-23A9B2AE00', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 06:21:18 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-7994B2BAEC', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 06:07:18 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-10010B7666', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 06:07:18 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-62F59303D3', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 06:07:18 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-F289CA5225', 'policy': 'Persistence & Defense Evasion Response',... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 17:51:40 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 17:50:07 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 17:50:07 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 17:50:06 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 17:50:06 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 17:50:05 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 17:50:05 | worker (-) | approval.request.create_remediation_task | approval | Pending |
| 2026-10-22 17:50:05 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 17:50:05 | worker (-) | approval.request.create_ticket | approval | Pending |
| 2026-10-22 17:50:05 | worker (-) | automation.Critical Vulnerability Remediation | automation | Matched |
| 2026-10-22 17:50:04 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 17:50:04 | worker (-) | approval.request.create_remediation_task | approval | Pending |
| 2026-10-22 17:50:04 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 17:50:04 | worker (-) | approval.request.create_ticket | approval | Pending |
| 2026-10-22 17:50:04 | worker (-) | automation.Critical Vulnerability Remediation | automation | Matched |
