Settings: Audit Logs
Focus
Focus
Strata Cloud Manager

Settings: Audit Logs

Table of Contents

Settings: Audit Logs

Learn how to view audit logs.
Where Can I Use This?
What Do I Need?
  • Prisma Access (Managed by Strata Cloud Manager)
  • AIOps for NGFW Free
    or
    AIOps for NGFW Premium
    license
In
Settings > Audit Logs
, audit logs provide records of all actions initiated by users at the platform or a tenant level. It provides logs on changes made, the owner of the change, the date and time of the change, and the description of the change. You can use these logs for compliance and troubleshooting purposes. You can filter the audit logs by the date range with the capability, by a user, category, and type of change.
The
Settings
Audit Logs
Audit Logs
tab provides records of settings actions initiated by users at the platform or a tenant level. You can use these logs for compliance and troubleshooting purposes.
Filter
on date range, user ID, user name, category, actions, or action status.
Export
the compressed file to download the logs in .csv format. Set your log retention time in the
Settings
.

AIOps for NGFW Free
or
AIOps for NGFW Premium
Audit Logs

Where Can I Use This?
What Do I Need?
  • Strata Cloud Manager
  • AIOps for NGFW Free
    or
    AIOps for NGFW Premium
    license
AIOps for NGFW Free
or
AIOps for NGFW Premium
audit logs provide details on actions that your admins take. You can see changes such as the following:
Title
Description
User ID
The ID of the person who made the change.
User Name
The name of the person who made the change.
Category and Subcategory
  • Alerts and Incidents
    • Subcategory: Alert Notification Rules
    • Subcategory: Case Creation Rules
    • Subcategory: Detection Rules
  • Feature Adoption Recommended Services
  • Feature Adoption Zone Role
  • Global AST Setting
    • Subcategory: Global AST State Change
  • Metadata Export
    • Subcategory: File download
  • Security Checks
    • Subcategory: Checks
    • Subcategory: Security Check Exceptions
  • SFDC Ticket Creation
    • Subcategory: Create AST Ticket
    • Subcategory: Create Ticket
    • Subcategory: Fetch PST Ticket
    • Subcategory: Fetch Ticket
  • TFS Upload
    • Subcategory: File Upload
Action
The action taken by the person who made the change, such as: create, created, delete, deleted, disabled, edited, enabled, get, initiated, login, overridden, restored, or update.
Action Status
The status of the action, such as: successful, failed, or initiated.
Description
The description of the action.
Timestamp
When the action was completed.
Impacted Resource Details
This field displays further details about the impacted resource. It could contain a link to a
Strata Cloud Manager
page, a link to an external page, or plain text that provides more details in addition to the description field. For example, with the Security Exception Checks category, the link for the
Exceptions Page
is a shortcut to the Security Posture Settings.

Recommended For You