System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2299
Last 24 hours
105
User actions
54523
Security actions
28641
Approvals & decisions
24626
Config changes
5443
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-09-16 00:18:03 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-15 09:51:38 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-15 03:36:32 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-14 05:31:54 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-10 14:06:07 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-10 12:43:36 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-10 10:56:08 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-10 08:48:02 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-09 19:36:50 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-09 15:09:19 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-09 09:07:05 | ops | platform_admin | auth.demo_auto_login | auth | - | Success | {'method': 'demo_auto_login'} |
| 2026-09-08 14:13:40 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-06 20:49:16 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-06 12:32:33 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-06 08:42:15 | ops | platform_admin | auth.demo_auto_login | auth | - | Success | {'method': 'demo_auto_login'} |
| 2026-09-06 06:16:33 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-05 03:12:39 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-02 17:33:14 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-09-02 09:23:55 | admin | - | auth.logout | auth | - | Success | {} |
| 2026-08-31 22:14:30 | admin | - | auth.api_token_issued | auth | - | Success | {} |
| 2026-08-29 16:37:08 | ops | platform_admin | auth.demo_auto_login | auth | - | Success | {'method': 'demo_auto_login'} |
| 2026-08-29 16:37:08 | ops | platform_admin | auth.demo_auto_login | auth | - | Success | {'method': 'demo_auto_login'} |
| 2026-08-29 16:37:04 | ops | platform_admin | auth.demo_auto_login | auth | - | Success | {'method': 'demo_auto_login'} |
| 2026-08-29 16:37:03 | ops | platform_admin | auth.demo_auto_login | auth | - | Success | {'method': 'demo_auto_login'} |
| 2026-08-29 16:37:02 | ops | platform_admin | auth.demo_auto_login | auth | - | Success | {'method': 'demo_auto_login'} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 05:56:42 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 05:54:01 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-21 05:53:38 | worker (-) | approval.request.isolate_device | approval | Pending |
| 2026-10-21 05:53:38 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-21 05:53:38 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-21 05:53:38 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-21 05:53:37 | worker (-) | automation.Ransomware Impact Response | automation | Matched |
| 2026-10-21 05:52:33 | worker (-) | remediation.update_incident | remediation | Succeeded |
| 2026-10-21 05:52:33 | worker (-) | remediation.notify_teams | remediation | Succeeded |
| 2026-10-21 05:52:33 | worker (-) | automation.High Risk Device SOC Alert | automation | Matched |
| 2026-10-21 05:52:00 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 05:51:58 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 05:51:57 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 05:51:55 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 05:51:54 | worker (-) | cti.ingest | threat_intelligence | Success |
