System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2284
Last 24 hours
106
User actions
54796
Security actions
28784
Approvals & decisions
24750
Config changes
5470
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 03:11:44 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-BC717AD11C', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:11:44 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-631E8B527E', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:11:44 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-03DFA9FCE4', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:07:26 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-2290F7CC09', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:07:26 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-1DB10AB441', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 03:07:26 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-C071B25FC4', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:52:03 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-1808CA4AA8', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 02:52:03 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-879AF77F51', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 02:52:03 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-789936BA9B', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 02:52:03 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-1BEE0203EB', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 02:45:34 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-4FC7333C29', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 02:45:34 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-A541673EB0', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 02:45:34 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-647BF7806D', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 02:45:34 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-21DA3270A6', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 02:45:34 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-DC4E2E2229', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 02:17:29 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-FA6BE762AB', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:17:29 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-7CC05E8565', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:17:29 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-BF9B993917', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:16:23 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-E686A71423', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:16:23 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-96B81ABEC3', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:16:23 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-7ABB6F5B6F', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:10:52 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-9C1B397783', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:10:52 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-E8DAE18963', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:10:52 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-A622646368', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-21 02:06:31 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-9238FDA92C', 'policy': 'Critical Vulnerability Remediation',... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 12:51:55 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 12:51:03 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-21 12:51:03 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-21 12:51:03 | worker (-) | approval.request.run_hunting_queries | approval | Pending |
| 2026-10-21 12:51:03 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-21 12:51:03 | worker (-) | approval.request.investigate | approval | Pending |
| 2026-10-21 12:51:02 | worker (-) | automation.Persistence & Defense Evasion Response | automation | Matched |
| 2026-10-21 12:46:55 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 12:41:55 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 12:39:03 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-21 12:38:55 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 12:38:53 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 12:38:52 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 12:38:50 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 12:38:48 | worker (-) | cti.ingest | threat_intelligence | Success |
