Audit log
The Audit log provides a chronological record of operator activities from across your organization. It captures information about operator interactions with the FortiDLP Console and FortiDLP API, so you can identify security and compliance violations, and misconfigurations.
The Audit log tracks a wide range of activities, such as:
- logins/logouts
- enrollment token creation/revocation
- access token creation/revocation
- policy group/template/asset changes
- configuration changes, and
- manual actions.
Each log entry records the activity's timestamp, the operator's name, and a description of what occurred.
|
For example, a "Policy updated" entry, which displays when an operator modifies a policy template, details the related template/group and both the old and new parameter values. |
The Audit log is filterable and can be exported to a TXT file.
