System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2094
Last 24 hours
106
User actions
55584
Security actions
29259
Approvals & decisions
25161
Config changes
5556
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 08:39:48 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1416} |
| 2026-10-22 08:39:47 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 287} |
| 2026-10-22 08:39:46 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1758} |
| 2026-10-22 08:39:43 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 653} |
| 2026-10-22 08:39:42 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3427} |
| 2026-10-22 08:38:55 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 6, 'latency_ms': 22576} |
| 2026-10-22 08:38:29 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 2207} |
| 2026-10-22 08:38:27 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 236} |
| 2026-10-22 08:38:26 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 405} |
| 2026-10-22 08:38:25 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 548} |
| 2026-10-22 08:32:52 | worker | - | remediation.update_incident | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-430904F800', 'action_id':... |
| 2026-10-22 08:32:52 | worker | - | remediation.notify_teams | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-430904F800', 'action_id':... |
| 2026-10-22 08:31:18 | worker | - | network.scan_all | device | - | Success | {'devices': 8, 'ports': 0, 'servers': 3, 'nmap': False} |
| 2026-10-22 08:23:03 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1467} |
| 2026-10-22 08:23:01 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 339} |
| 2026-10-22 08:23:00 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1776} |
| 2026-10-22 08:22:58 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 655} |
| 2026-10-22 08:22:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3554} |
| 2026-10-22 08:22:20 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 0, 'new': 0, 'latency_ms': 49406} |
| 2026-10-22 08:21:30 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1961} |
| 2026-10-22 08:21:28 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 381} |
| 2026-10-22 08:21:27 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 312} |
| 2026-10-22 08:21:26 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 509} |
| 2026-10-22 08:19:53 | worker | - | remediation.update_incident | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-97EFC46563', 'action_id':... |
| 2026-10-22 08:19:53 | worker | - | remediation.notify_teams | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-97EFC46563', 'action_id':... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 11:56:27 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 11:55:22 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-22 11:51:27 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 11:46:27 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 11:46:09 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:08 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:07 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:04 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:03 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:02 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:46:00 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:45:59 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:45:58 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:45:57 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:45:57 | worker (-) | approval.request.create_remediation_task | approval | Pending |
