System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2302
Last 24 hours
105
User actions
54488
Security actions
28620
Approvals & decisions
24609
Config changes
5439
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-21 04:46:55 | worker | - | approval.request.block_indicator | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-C6CA1B7D59', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | approval.request.notify_soc | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-767070D05F', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | approval.request.run_hunting_queries | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-5F1D6751DF', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-448F9248EA', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-0C01D6E511', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-21 04:46:55 | worker | - | automation.Persistence & Defense Evasion Response | automation | 1001 | Matched | {'rule': 'Persistence & Defense Evasion Response', 'trigger': 'incident',... |
| 2026-10-21 04:46:34 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-21 04:43:05 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1367} |
| 2026-10-21 04:43:03 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 488} |
| 2026-10-21 04:43:02 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1353} |
| 2026-10-21 04:42:59 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 646} |
| 2026-10-21 04:42:58 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5127, 'new': 0, 'latency_ms': 2862} |
| 2026-10-21 04:42:11 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 0, 'new': 0, 'latency_ms': 30639} |
| 2026-10-21 04:41:41 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 2315} |
| 2026-10-21 04:41:38 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 237} |
| 2026-10-21 04:41:38 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 384} |
| 2026-10-21 04:41:37 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 528} |
| 2026-10-21 04:41:34 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-21 04:39:01 | worker | - | vanta.sync | compliance | - | Success | {'tests_total': 5, 'tests_failing': 1, 'devices_pushed': 8, 'vulnerabilities_pushed':... |
| 2026-10-21 04:36:34 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-21 04:31:34 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-21 04:30:55 | worker | - | network.scan_all | device | - | Success | {'devices': 8, 'ports': 0, 'servers': 3, 'nmap': False} |
| 2026-10-21 04:26:34 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-21 04:26:15 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1405} |
| 2026-10-21 04:26:13 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 753} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-21 05:03:05 | admin (administrator) | report.generated.soc | reporting | Success |
| 2026-10-21 05:01:35 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-21 05:01:00 | worker (-) | automation.Lateral Movement Investigation | automation | Dry_run |
| 2026-10-21 05:00:06 | admin (administrator) | report.generated.executive | reporting | Success |
| 2026-10-21 04:59:41 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:39 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:37 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:34 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:59:32 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:41 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:22 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:19 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:18 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:58:18 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-21 04:56:35 | worker (-) | patch.inventory.synced | patch | Success |
