System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2102
Last 24 hours
106
User actions
55539
Security actions
29238
Approvals & decisions
25143
Config changes
5551
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 08:21:28 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 381} |
| 2026-10-22 08:21:27 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 312} |
| 2026-10-22 08:21:26 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 509} |
| 2026-10-22 08:19:53 | worker | - | remediation.update_incident | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-97EFC46563', 'action_id':... |
| 2026-10-22 08:19:53 | worker | - | remediation.notify_teams | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-97EFC46563', 'action_id':... |
| 2026-10-22 08:06:13 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1474} |
| 2026-10-22 08:06:11 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 467} |
| 2026-10-22 08:06:10 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1765} |
| 2026-10-22 08:06:07 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 891} |
| 2026-10-22 08:06:06 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3936} |
| 2026-10-22 08:05:20 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 0, 'new': 0, 'latency_ms': 65313} |
| 2026-10-22 08:04:14 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 2203} |
| 2026-10-22 08:04:12 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 201} |
| 2026-10-22 08:04:11 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 376} |
| 2026-10-22 08:04:11 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 3745} |
| 2026-10-22 07:47:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1390} |
| 2026-10-22 07:47:55 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 478} |
| 2026-10-22 07:47:54 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1132} |
| 2026-10-22 07:47:52 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 1241} |
| 2026-10-22 07:47:50 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 2779} |
| 2026-10-22 07:47:07 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 22115} |
| 2026-10-22 07:46:41 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1739} |
| 2026-10-22 07:46:39 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 124} |
| 2026-10-22 07:46:39 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 384} |
| 2026-10-22 07:46:38 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 381} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 10:51:25 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 10:46:25 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 10:45:26 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 10:45:25 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 10:45:25 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 10:45:24 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 10:45:24 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 10:45:23 | worker (-) | approval.request.create_remediation_task | approval | Pending |
| 2026-10-22 10:45:23 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 10:45:23 | worker (-) | approval.request.create_ticket | approval | Pending |
| 2026-10-22 10:45:23 | worker (-) | automation.Critical Vulnerability Remediation | automation | Matched |
| 2026-10-22 10:45:23 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 10:45:23 | worker (-) | approval.request.create_remediation_task | approval | Pending |
| 2026-10-22 10:45:23 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 10:45:23 | worker (-) | approval.request.create_ticket | approval | Pending |
