System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2080
Last 24 hours
106
User actions
55805
Security actions
29369
Approvals & decisions
25253
Config changes
5578
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 05:21:09 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-C94CF76438', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 05:21:09 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-E00BF589AC', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 05:06:30 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-CE030DF1DB', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 05:06:29 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-006F923478', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 05:06:28 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-1C5C1BAF29', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 05:06:27 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-CD3CA38E07', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 05:06:26 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-DFC0F920ED', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 04:31:39 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-6B52225858', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:31:38 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-F3AB445893', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:31:38 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-A024E8ED77', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:29:23 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-FA8ADD71F3', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:29:22 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-89D45648F0', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:29:21 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-8FB4C9C3D0', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:26:01 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-77983D049A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:26:01 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-A2A0E83704', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:26:01 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-FB87834FB9', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:20:31 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-94A7924B3E', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:20:31 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-2707CC8B45', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:20:30 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-22AB34EEB2', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:18:19 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-7596B571ED', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 04:18:19 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-6BC9E94150', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 04:18:18 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-23B2C15AFC', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 04:18:18 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-EA87557322', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 04:06:20 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-04896124C1', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 04:06:20 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-3D65F2295A', 'policy': 'Persistence & Defense Evasion Response',... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 17:26:47 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 17:26:45 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 17:26:44 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 17:26:43 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 17:26:39 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 17:26:16 | worker (-) | remediation.update_incident | remediation | Succeeded |
| 2026-10-22 17:26:16 | worker (-) | remediation.notify_teams | remediation | Succeeded |
| 2026-10-22 17:26:16 | worker (-) | automation.High Risk Device SOC Alert | automation | Matched |
| 2026-10-22 17:25:24 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-22 17:21:39 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 17:16:39 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 17:14:25 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-22 17:14:25 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 17:14:25 | worker (-) | approval.request.run_hunting_queries | approval | Pending |
| 2026-10-22 17:14:25 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
