Monitor Cortex XDR Gateway Management Activity

You can monitor the Cortex XDR Gateway permissions activity.
The Cortex XDR Gateway allows you to manage the user roles and permissions across your Cortex XDR CSP accounts. To track your permission management activity, in the Cortex XDR Gateway, navigate to <
User Name
> and select
Management Auditing
.
You must have Account Admin role permissions to access the Management Auditing page.
The
Management Audit Logs
fields describe the following information:
Field
Description
Description
Log message describing the action taken and on which tenant. To filter according to a tenant, use the
contains
operator.
Email
Email of the user who performed the action.
Result
The result of the action:
Success
,
Fail
, or
N/A
Severity
Severity associated with the log:
  • High
  • Medium
  • Low
  • Informational
Subtype
Additional classification of permissions log.
Timestamp
Date and time when the action occurred displayed in UTC.
Type
Type of action,
Permissions
or
Roles.
For Cortex XDR 3.0, only Permissions type actions are displayed.
User Name
Name of the user who performed the action.

Recommended For You