System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2093
Last 24 hours
106
User actions
55514
Security actions
29222
Approvals & decisions
25126
Config changes
5549
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 08:43:55 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:55 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:54 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:53 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:53 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:53 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-C64F2B49AD', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:53 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-0793E10E3C', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:53 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-54641260E7', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:53 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:52 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:52 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-899B1AC5E6', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:52 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-34A90D0C1D', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:52 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-4B16986454', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:52 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:51 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:51 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:51 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-6162280C5A', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:51 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-EE8FEFBE9E', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:51 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-D143A57FD5', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:51 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:50 | worker | - | automation.Exploitable Vulnerability Alert | automation | - | Dry_run | {'rule': 'Exploitable Vulnerability Alert', 'trigger': 'vulnerability',... |
| 2026-10-22 08:43:50 | worker | - | approval.request.create_remediation_task | approval | - | Pending | {'approval_id': 'APR-1F833FEE37', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:50 | worker | - | approval.request.notify_soc | approval | - | Pending | {'approval_id': 'APR-2902BDDCD8', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:50 | worker | - | approval.request.create_ticket | approval | - | Pending | {'approval_id': 'APR-F5A66D9CCC', 'policy': 'Critical Vulnerability Remediation',... |
| 2026-10-22 08:43:50 | worker | - | automation.Critical Vulnerability Remediation | automation | - | Matched | {'rule': 'Critical Vulnerability Remediation', 'trigger': 'vulnerability',... |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 10:11:25 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 10:10:22 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-22 10:09:33 | worker (-) | approval.request.block_indicator | approval | Pending |
| 2026-10-22 10:09:32 | worker (-) | approval.request.notify_soc | approval | Pending |
| 2026-10-22 10:09:32 | worker (-) | approval.request.run_hunting_queries | approval | Pending |
| 2026-10-22 10:09:32 | worker (-) | approval.request.collect_investigation_package | approval | Pending |
| 2026-10-22 10:09:32 | worker (-) | approval.request.investigate | approval | Pending |
| 2026-10-22 10:09:32 | worker (-) | automation.Persistence & Defense Evasion Response | automation | Matched |
| 2026-10-22 10:06:24 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 10:05:12 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 10:05:10 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 10:05:08 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 10:05:05 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 10:05:04 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 10:03:40 | worker (-) | cti.ingest | threat_intelligence | Success |
