System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2298
Last 24 hours
105
User actions
54603
Security actions
28683
Approvals & decisions
24662
Config changes
5451
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 06:07:17 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 239} |
| 2026-10-21 06:07:16 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 409} |
| 2026-10-21 06:07:15 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 524} |
| 2026-10-21 06:04:28 | worker | - | remediation.update_incident | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-3D517A1874', 'action_id':... |
| 2026-10-21 06:04:28 | worker | - | remediation.notify_teams | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-3D517A1874', 'action_id':... |
| 2026-10-21 05:52:33 | worker | - | remediation.update_incident | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-01453F5A8C', 'action_id':... |
| 2026-10-21 05:52:33 | worker | - | remediation.notify_teams | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-01453F5A8C', 'action_id':... |
| 2026-10-21 05:52:00 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1379} |
| 2026-10-21 05:51:58 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 289} |
| 2026-10-21 05:51:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 472} |
| 2026-10-21 05:51:55 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 638} |
| 2026-10-21 05:51:54 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5127, 'new': 0, 'latency_ms': 3367} |
| 2026-10-21 05:50:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 15873} |
| 2026-10-21 05:50:37 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1826} |
| 2026-10-21 05:50:35 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 196} |
| 2026-10-21 05:50:34 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 391} |
| 2026-10-21 05:50:34 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 492} |
| 2026-10-21 05:35:20 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1525} |
| 2026-10-21 05:35:18 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 305} |
| 2026-10-21 05:35:11 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1568} |
| 2026-10-21 05:33:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 661} |
| 2026-10-21 05:33:55 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5127, 'new': 0, 'latency_ms': 3092} |
| 2026-10-21 05:32:03 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 1, 'latency_ms': 27736} |
| 2026-10-21 05:31:31 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 2275} |
| 2026-10-21 05:31:29 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 228} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 07:54:51 | worker (-) | approval.request.isolate_device | approval | Pending |
| 2026-10-21 07:54:51 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-21 07:54:51 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-21 07:54:51 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-21 07:54:51 | worker (-) | automation.Ransomware Impact Response | automation | Matched |
| 2026-10-21 07:54:02 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-21 07:53:46 | worker (-) | remediation.update_incident | remediation | Succeeded |
| 2026-10-21 07:53:46 | worker (-) | remediation.notify_teams | remediation | Succeeded |
| 2026-10-21 07:53:46 | worker (-) | automation.High Risk Device SOC Alert | automation | Matched |
| 2026-10-21 07:51:46 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 07:49:09 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 07:49:07 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 07:49:06 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 07:49:03 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 07:49:02 | worker (-) | cti.ingest | threat_intelligence | Success |
