System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2139
Last 24 hours
106
User actions
55869
Security actions
29406
Approvals & decisions
25287
Config changes
5584
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 04:26:01 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-77983D049A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:26:01 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-A2A0E83704', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:26:01 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-FB87834FB9', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:20:31 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-94A7924B3E', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:20:31 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-2707CC8B45', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:20:30 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-22AB34EEB2', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 04:18:19 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-7596B571ED', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 04:18:19 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-6BC9E94150', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 04:18:18 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-23B2C15AFC', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 04:18:18 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-EA87557322', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-22 04:06:20 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-04896124C1', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 04:06:20 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-3D65F2295A', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 04:06:20 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-2AB956C5D3', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 04:06:19 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-65CAE198B7', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 04:06:19 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-72B0BD1EEF', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 03:30:52 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-8280C87E31', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:30:52 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-37FFBF3002', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:30:52 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-A16DF1E18F', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:28:42 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-5D9C31BC1A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:28:42 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-210D93B115', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:28:42 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-08D126BB89', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:25:24 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-E8CFF20730', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:25:24 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-A31F824489', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:25:24 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-D34B960F4A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 03:20:18 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-506ACE5F0B', 'policy': 'Critical Vulnerability Remediation',... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 19:01:44 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 18:56:43 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 18:55:24 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-22 18:52:34 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:52:33 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:52:32 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:52:29 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:52:28 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:51:50 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:51:43 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 18:51:04 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:51:02 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:51:02 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:51:01 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 18:50:38 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
