System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2110
Last 24 hours
106
User actions
55699
Security actions
29322
Approvals & decisions
25215
Config changes
5567
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 09:45:59 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 53066} |
| 2026-10-22 09:45:02 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 3973} |
| 2026-10-22 09:44:58 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 258} |
| 2026-10-22 09:44:58 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 385} |
| 2026-10-22 09:44:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 727} |
| 2026-10-22 09:33:41 | worker | - | remediation.update_incident | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-2639841450', 'action_id':... |
| 2026-10-22 09:33:41 | worker | - | remediation.notify_teams | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-2639841450', 'action_id':... |
| 2026-10-22 09:31:18 | worker | - | network.scan_all | device | - | Success | {'devices': 8, 'ports': 0, 'servers': 3, 'nmap': False} |
| 2026-10-22 09:29:43 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 1, 'latency_ms': 1358} |
| 2026-10-22 09:29:41 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 268} |
| 2026-10-22 09:29:40 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1392} |
| 2026-10-22 09:29:38 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 657} |
| 2026-10-22 09:29:37 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3184} |
| 2026-10-22 09:28:52 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 11, 'latency_ms': 21538} |
| 2026-10-22 09:28:27 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1783} |
| 2026-10-22 09:28:25 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 224} |
| 2026-10-22 09:28:24 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 472} |
| 2026-10-22 09:28:23 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 431} |
| 2026-10-22 09:20:33 | worker | - | remediation.update_incident | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-3EC8C353DF', 'action_id':... |
| 2026-10-22 09:20:32 | worker | - | remediation.notify_teams | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-3EC8C353DF', 'action_id':... |
| 2026-10-22 09:13:01 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1385} |
| 2026-10-22 09:12:59 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 419} |
| 2026-10-22 09:12:58 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1687} |
| 2026-10-22 09:12:55 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 959} |
| 2026-10-22 09:12:54 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3084} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 14:48:07 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:06 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:05 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:05 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:04 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:04 | worker (-) | approval.request.create_remediation_task | approval | Pending |
| 2026-10-22 14:48:04 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 14:48:04 | worker (-) | approval.request.create_ticket | approval | Pending |
| 2026-10-22 14:48:04 | worker (-) | automation.Critical Vulnerability Remediation | automation | Matched |
| 2026-10-22 14:48:03 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 14:48:03 | worker (-) | approval.request.create_remediation_task | approval | Pending |
| 2026-10-22 14:48:03 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 14:48:03 | worker (-) | approval.request.create_ticket | approval | Pending |
| 2026-10-22 14:48:03 | worker (-) | automation.Critical Vulnerability Remediation | automation | Matched |
| 2026-10-22 14:48:02 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
