System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2096
Last 24 hours
106
User actions
55389
Security actions
29159
Approvals & decisions
25072
Config changes
5536
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 06:41:22 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 635} |
| 2026-10-22 06:41:21 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3334} |
| 2026-10-22 06:41:18 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 06:40:34 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 36899} |
| 2026-10-22 06:40:20 | worker | - | vanta.sync | compliance | - | Success | {'tests_total': 5, 'tests_failing': 1, 'devices_pushed': 8, 'vulnerabilities_pushed':... |
| 2026-10-22 06:39:53 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1945} |
| 2026-10-22 06:39:51 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 225} |
| 2026-10-22 06:39:50 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 381} |
| 2026-10-22 06:39:49 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 418} |
| 2026-10-22 06:36:18 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 06:31:18 | worker | - | network.scan_all | device | - | Success | {'devices': 8, 'ports': 0, 'servers': 3, 'nmap': False} |
| 2026-10-22 06:31:17 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 06:30:59 | worker | - | remediation.update_incident | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-046917285A', 'action_id':... |
| 2026-10-22 06:30:59 | worker | - | remediation.notify_teams | remediation | corp-srv-app02 INC-01003 | Succeeded | approval: n/a · {'policy': 'High Risk Device SOC Alert', 'run_id': 'RUN-046917285A', 'action_id':... |
| 2026-10-22 06:30:59 | worker | - | automation.High Risk Device SOC Alert | automation | 1003 | Matched | {'rule': 'High Risk Device SOC Alert', 'trigger': 'incident', 'matched_conditions':... |
| 2026-10-22 06:30:59 | worker | - | automation.Lateral Movement Investigation | automation | 1003 | Dry_run | {'rule': 'Lateral Movement Investigation', 'trigger': 'incident',... |
| 2026-10-22 06:26:17 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 06:25:19 | worker | - | vanta.sync | compliance | - | Success | {'tests_total': 5, 'tests_failing': 1, 'devices_pushed': 8, 'vulnerabilities_pushed':... |
| 2026-10-22 06:24:28 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1372} |
| 2026-10-22 06:24:26 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 503} |
| 2026-10-22 06:24:25 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1305} |
| 2026-10-22 06:24:23 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 670} |
| 2026-10-22 06:24:22 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 5173} |
| 2026-10-22 06:23:44 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 15, 'latency_ms': 18727} |
| 2026-10-22 06:23:22 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 1892} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 07:07:55 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-22 07:07:55 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 07:07:55 | worker (-) | approval.request.run_hunting_queries | approval | Pending |
| 2026-10-22 07:07:55 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-22 07:07:55 | worker (-) | approval.request.investigate | approval | Pending |
| 2026-10-22 07:07:55 | worker (-) | automation.Persistence & Defense Evasion Response | automation | Matched |
| 2026-10-22 07:06:19 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 07:01:18 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 06:57:52 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 06:57:50 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 06:57:49 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 06:57:46 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 06:57:45 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 06:57:00 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 06:56:42 | worker (-) | cti.ingest | threat_intelligence | Success |
