Remediation Activity Logs

Monitor how incidents are remediated by viewing remediation activity logs.
You can proactively monitor incident remediation logs to track activity. These logs enable you to:
  • Audit the progress of automatic remediation.
  • Track how incidents were addressed.
The logs include actions taken automatically by Prisma SaaS and actions taken by asset owners and administrators.
  1. Select
    Reports
    Remediation Activity
    .
  2. Filter the list and narrow the results to meet your audit needs.
    Facet
    Filter by
    Date
    Time frame when the remediation activity occurred.
    remediation-activity-log-timeframe.png
    Any Action Taken
    Remediation action taken on the asset.
    remediation-activity-log-action-taken.png
    All Rules
    Policy rule that discovered the risk.
    remediation-activity-log-all-rules.png
    Any Action Taker
    Asset owners and Administrator (or service) that performed the action. To view all activity by an administrator, browse the admin activity log.
    Choose
    Prisma SaaS
    to view remediation activity that was done automatically as part of a policy rule.
    remediation-activity-log-action-taker.png
    Search
    Part of filename or user name.
    remediation-activity-log-text-search.png
  3. Export this data to a CSV file to review the remediation logs offline.

Recommended For You