System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2299
Last 24 hours
105
User actions
54523
Security actions
28641
Approvals & decisions
24626
Config changes
5443
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 05:56:42 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-21 05:54:01 | worker | - | vanta.sync | compliance | - | Success | {'tests_total': 5, 'tests_failing': 1, 'devices_pushed': 8, 'vulnerabilities_pushed':... |
| 2026-10-21 05:53:38 | worker | - | approval.request.isolate_device | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-51859FEA45', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 05:53:38 | worker | - | approval.request.block_indicator | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-676D4A15BE', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 05:53:38 | worker | - | approval.request.collect_investigation_package | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-102771FA18', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 05:53:38 | worker | - | approval.request.notify_soc | approval | corp-srv-file01 INC-01002 | Pending | {'approval_id': 'APR-A00A91C63F', 'policy': 'Ransomware Impact Response', 'action_id':... |
| 2026-10-21 05:53:37 | worker | - | automation.Ransomware Impact Response | automation | 1002 | Matched | {'rule': 'Ransomware Impact Response', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-21 05:52:33 | worker | - | remediation.update_incident | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-01453F5A8C', 'action_id':... |
| 2026-10-21 05:52:33 | worker | - | remediation.notify_teams | remediation | corp-wks-1187 INC-01001 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-01453F5A8C', 'action_id':... |
| 2026-10-21 05:52:33 | worker | - | automation.High Risk Device SOC Alert | automation | 1001 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-21 05:52:00 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1379} |
| 2026-10-21 05:51:58 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 289} |
| 2026-10-21 05:51:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 472} |
| 2026-10-21 05:51:55 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 638} |
| 2026-10-21 05:51:54 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5127, 'new': 0, 'latency_ms': 3367} |
| 2026-10-21 05:51:42 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-21 05:50:57 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 15873} |
| 2026-10-21 05:50:37 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1826} |
| 2026-10-21 05:50:35 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 196} |
| 2026-10-21 05:50:34 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 391} |
| 2026-10-21 05:50:34 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 492} |
| 2026-10-21 05:47:04 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-7AEF9F599C', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 05:47:04 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-8164F1B0FC', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 05:47:04 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-1851D12618', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 05:47:03 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-72EAC6C017', 'policy': 'Persistence & Defense Evasion Response',... |
1 / 5188
Next →
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 05:56:42 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 05:54:01 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-21 05:53:38 | worker (-) | approval.request.isolate_device | approval | Pending |
| 2026-10-21 05:53:38 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-21 05:53:38 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-21 05:53:38 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-21 05:53:37 | worker (-) | automation.Ransomware Impact Response | automation | Matched |
| 2026-10-21 05:52:33 | worker (-) | remediation.update_incident | remediation | Succeeded |
| 2026-10-21 05:52:33 | worker (-) | remediation.notify_teams | remediation | Succeeded |
| 2026-10-21 05:52:33 | worker (-) | automation.High Risk Device SOC Alert | automation | Matched |
| 2026-10-21 05:52:00 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 05:51:58 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 05:51:57 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 05:51:55 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 05:51:54 | worker (-) | cti.ingest | threat_intelligence | Success |
