System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2291
Last 24 hours
105
User actions
54556
Security actions
28658
Approvals & decisions
24642
Config changes
5446
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 05:32:03 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 1, 'latency_ms': 27736} |
| 2026-10-21 05:31:31 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 2275} |
| 2026-10-21 05:31:29 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 228} |
| 2026-10-21 05:31:28 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 383} |
| 2026-10-21 05:31:27 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 480} |
| 2026-10-21 05:30:55 | worker | - | network.scan_all | device | - | Success | {'devices': 8, 'ports': 0, 'servers': 3, 'nmap': False} |
| 2026-10-21 05:16:04 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1389} |
| 2026-10-21 05:16:02 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 486} |
| 2026-10-21 05:16:01 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1909} |
| 2026-10-21 05:15:58 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 636} |
| 2026-10-21 05:15:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5127, 'new': 0, 'latency_ms': 2898} |
| 2026-10-21 05:15:20 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 18725} |
| 2026-10-21 05:14:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 2147} |
| 2026-10-21 05:14:55 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 222} |
| 2026-10-21 05:14:55 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 330} |
| 2026-10-21 05:14:54 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 694} |
| 2026-10-21 05:04:15 | worker | - | remediation.update_incident | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-23BABC36C0', 'action_id':... |
| 2026-10-21 05:04:15 | worker | - | remediation.notify_teams | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-23BABC36C0', 'action_id':... |
| 2026-10-21 04:59:41 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1444} |
| 2026-10-21 04:59:39 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 876} |
| 2026-10-21 04:59:37 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1562} |
| 2026-10-21 04:59:34 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 1221} |
| 2026-10-21 04:59:32 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5127, 'new': 0, 'latency_ms': 3336} |
| 2026-10-21 04:58:41 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 3, 'latency_ms': 14930} |
| 2026-10-21 04:58:22 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 2205} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 06:51:44 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 06:47:46 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-21 06:47:46 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-21 06:47:46 | worker (-) | approval.request.run_hunting_queries | approval | Pending |
| 2026-10-21 06:47:45 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-21 06:47:45 | worker (-) | approval.request.investigate | approval | Pending |
| 2026-10-21 06:47:45 | worker (-) | automation.Persistence & Defense Evasion Response | automation | Matched |
| 2026-10-21 06:46:44 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 06:41:46 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:41:44 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:41:43 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 06:41:43 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:41:40 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:41:40 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 06:40:53 | worker (-) | cti.ingest | threat_intelligence | Success |
