System Logs
Every user action, security action, approval decision and configuration change - recorded with actor, role, time and result. Immutable-style audit trail.
2094
Last 24 hours
106
User actions
55584
Security actions
29259
Approvals & decisions
25161
Config changes
5556
System & workers
Log groups
| Timestamp | Actor | Role | Action | Group | Device / Incident | Result | Details |
|---|---|---|---|---|---|---|---|
| 2026-10-22 10:09:32 | worker | - | approval.request.collect_investigation_package | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-0A35D89501', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 10:09:32 | worker | - | approval.request.investigate | approval | corp-wks-1187 INC-01001 | Pending | {'approval_id': 'APR-34927FC2BA', 'policy': 'Persistence & Defense Evasion Response',... |
| 2026-10-22 10:09:32 | worker | - | automation.Persistence & Defense Evasion Response | automation | 1001 | Matched | {'rule': 'Persistence & Defense Evasion Response', 'trigger': 'incident',... |
| 2026-10-22 10:06:24 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 10:05:12 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1396} |
| 2026-10-22 10:05:10 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 262} |
| 2026-10-22 10:05:08 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1316} |
| 2026-10-22 10:05:05 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 655} |
| 2026-10-22 10:05:04 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3467} |
| 2026-10-22 10:03:40 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 59171} |
| 2026-10-22 10:02:09 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nz-ncsc', 'items': 1, 'new': 0, 'latency_ms': 2261} |
| 2026-10-22 10:02:07 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'uk-ncsc', 'items': 20, 'new': 0, 'latency_ms': 232} |
| 2026-10-22 10:02:06 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-advisories', 'items': 30, 'new': 0, 'latency_ms': 306} |
| 2026-10-22 10:02:06 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cisa-kev', 'items': 1754, 'new': 0, 'latency_ms': 457} |
| 2026-10-22 10:01:23 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 09:56:23 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 09:55:21 | worker | - | vanta.sync | compliance | - | Success | {'tests_total': 5, 'tests_failing': 1, 'devices_pushed': 8, 'vulnerabilities_pushed':... |
| 2026-10-22 09:51:23 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 09:46:53 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'cert-eu', 'items': 10, 'new': 0, 'latency_ms': 1429} |
| 2026-10-22 09:46:51 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'redhat', 'items': 100, 'new': 0, 'latency_ms': 299} |
| 2026-10-22 09:46:50 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'github-advisories', 'items': 100, 'new': 0, 'latency_ms': 1291} |
| 2026-10-22 09:46:47 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'enisa', 'items': 14, 'new': 0, 'latency_ms': 664} |
| 2026-10-22 09:46:46 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'msrc', 'items': 5103, 'new': 0, 'latency_ms': 3460} |
| 2026-10-22 09:46:22 | worker | - | patch.inventory.synced | patch | - | Success | {'devices': 8, 'apps_created': 0, 'apps_updated': 40, 'out_of_date': 26} |
| 2026-10-22 09:45:59 | worker | - | cti.ingest | threat_intelligence | - | Success | {'source': 'nvd', 'items': 500, 'new': 0, 'latency_ms': 53066} |
Latest activity
| Time | Actor | Action | Group | Result |
|---|---|---|---|---|
| 2026-10-22 11:56:27 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 11:55:22 | worker (-) | vanta.sync | compliance | Success |
| 2026-10-22 11:51:27 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 11:46:27 | worker (-) | patch.inventory.synced | patch | Success |
| 2026-10-22 11:46:09 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:08 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:07 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:04 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:03 | worker (-) | cti.ingest | threat_intelligence | Success |
| 2026-10-22 11:46:02 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:46:00 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:45:59 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:45:58 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:45:57 | worker (-) | automation.Exploitable Vulnerability Alert | automation | Dry_run |
| 2026-10-22 11:45:57 | worker (-) | approval.request.create_remediation_task | approval | Pending |
