System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2075
Last 24 hours
106
User actions
55801
Security actions
29369
Approvals & decisions
25253
Config changes
5578
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 11:11:09 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 309} |
| 2026-10-22 11:11:08 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 701} |
| 2026-10-22 10:55:56 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1407} |
| 2026-10-22 10:55:54 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 312} |
| 2026-10-22 10:55:53 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1293} |
| 2026-10-22 10:55:51 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 654} |
| 2026-10-22 10:55:50 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3136} |
| 2026-10-22 10:55:13 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 39850} |
| 2026-10-22 10:54:20 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1892} |
| 2026-10-22 10:54:18 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 220} |
| 2026-10-22 10:54:18 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 385} |
| 2026-10-22 10:54:17 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 887} |
| 2026-10-22 10:39:02 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1549} |
| 2026-10-22 10:39:00 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 269} |
| 2026-10-22 10:38:59 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1734} |
| 2026-10-22 10:38:54 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 685} |
| 2026-10-22 10:38:52 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3484} |
| 2026-10-22 10:38:14 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 32202} |
| 2026-10-22 10:37:38 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1820} |
| 2026-10-22 10:37:35 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 237} |
| 2026-10-22 10:37:33 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 332} |
| 2026-10-22 10:37:31 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 461} |
| 2026-10-22 10:34:34 | worker | - | remediation.update_incident | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-EABA34820C', 'action_id':... |
| 2026-10-22 10:34:34 | worker | - | remediation.notify_teams | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-EABA34820C', 'action_id':... |
| 2026-10-22 10:31:19 | worker | - | network.scan_all | device | - | Success | {'devices': 8, 'ports': 0, 'servers': 3, 'nmap': False} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 17:26:16 | worker (-) | remediation.update_incident | remediation | Succeeded |
| 2026-10-22 17:26:16 | worker (-) | remediation.notify_teams | remediation | Succeeded |
| 2026-10-22 17:26:16 | worker (-) | automation.High Risk Device SOC Alert | automation | Matched |
| 2026-10-22 17:25:24 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-22 17:21:39 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 17:16:39 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 17:14:25 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-22 17:14:25 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 17:14:25 | worker (-) | approval.request.run_hunting_queries | approval | Pending |
| 2026-10-22 17:14:25 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-22 17:14:25 | worker (-) | approval.request.investigate | approval | Pending |
| 2026-10-22 17:14:25 | worker (-) | automation.Persistence & Defense Evasion Response | automation | Matched |
| 2026-10-22 17:11:39 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 17:11:30 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 17:11:28 | worker (-) | cti.ingest | threat_intelligence | Success |
