System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2289
Last 24 hours
105
User actions
54648
Security actions
28704
Approvals & decisions
24680
Config changes
5455
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 04:12:13 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-D4D759B75A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:12:13 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-196DA13828', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:07:55 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-BC32A32364', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:07:55 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-99FDC2E222', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 04:07:55 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-8C603B59FD', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:52:47 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-58A74CE716', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 03:52:47 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-DA04DF95BD', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 03:52:47 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-63C1150B6E', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 03:52:47 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-7A5DDBD9A9', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 03:46:21 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-AB9C5AF3DA', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 03:46:20 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-88DB2BD0B2', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 03:46:20 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-39D419272A', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 03:46:20 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-D851AD5ADA', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 03:46:20 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-C3C51A7D2C', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 03:18:14 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-0CFE2AF36E', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:18:14 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-1E23BADC97', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:18:14 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-6BFD7BF6A8', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:17:07 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-03AD546A67', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:17:07 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-F4D6173156', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:17:07 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-57001FA327', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:11:44 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-BC717AD11C', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:11:44 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-631E8B527E', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:11:44 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-03DFA9FCE4', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:07:26 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-2290F7CC09', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:07:26 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-1DB10AB441', 'policy': 'Critical Vulnerability Remediation',... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 08:56:48 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 08:56:10 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 08:56:08 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 08:56:07 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 08:56:04 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 08:56:03 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 08:55:25 | worker (-) | approval.request.isolate_device | approval | Pending |
| 2026-10-21 08:55:25 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-21 08:55:25 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-21 08:55:25 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-21 08:55:24 | worker (-) | automation.Ransomware Impact Response | automation | Matched |
| 2026-10-21 08:55:15 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 08:54:50 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 08:54:47 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 08:54:47 | worker (-) | cti.ingest | threat_intelligence | Success |
