Track Activity with Audit Logging
Audit Logging allows you to record user driven and automated activity relating to your InsightAppSec events. For every action, you can see the time the action occurred and for manual activity, the user who completed the action. By enabling Audit Logging, you can track activity within the Insight Platform and InsightAppSec, and investigate who did what, when. Audit Logging will also help you fulfill compliance requirements if these details are requested by an external auditor.
Admin Access Required
You must have Administrator permissions to enable Audit Logging and to view Audit Log events. For more information on enabling Audit Logging, see Audit Logging in the Platform help.
InsightAppSec Audit Log Events
This section outlines all of the Audit Log events that InsightAppSec tracks. The events are sorted into the following categories:
- App
- Target
- Scan Config
- File
App Events
| Action | Description | Example |
|---|---|---|
| APP_CREATED | New app was created | App 'Banking' CREATED with description 'Core Banking Application' by user 'Mark Hamill' |
| APP_UPDATED | App was updated | App 'Banking' UPDATED by user 'Sai Cohen' |
| APP_DELETED | App was deleted | App 'Banking' DELETED by user 'Mark Hamill' |
Target Events
| Action | Description | Example |
|---|---|---|
| TARGET_CREATED | New target was created | Target 'webscantest.com' CREATED with description 'bank endpoint' by user 'Mark Hamill' |
| TARGET_UPDATED | Target was enabled or disabled | - Target 'webscantest.com' ENABLED-TRUE by user 'Binh Nguyen' - Target 'webscantest.com' ENABLED-FALSE by user 'Binh Nguyen' |
| TARGET_DELETED | Target was deleted | Target 'webscantest.com' DELETED by user 'Mark Hamill' |
Scan Config Events
| Action | Description | Example |
|---|---|---|
| SCAN_CONFIG_CREATED | New scan config was created | Scan Config 'High Risk' CREATED in App 'Banking' by user 'Mark Hamill' |
| SCAN_CONFIG_UPDATED | Scan config was updated | Scan Config 'High Risk' UPDATED in App 'Banking' by user 'Ari Patel' |
| SCAN_CONFIG_DELETED | Scan config was deleted | Scan Config 'High Risk' DELETED from App 'Banking' by user 'Mark Hamill' |
File Events
| Action | Description | Example |
|---|---|---|
| FILE_CREATED | New file was created | File 'macro_01_admin.rec' of type 'MACRO' CREATED by user 'Sai Cohen' |
| FILE_CONTENT_UPLOADED | New file was uploaded to the app | File 'macro_01_admin.rec' UPLOADED to App 'Banking' by user 'Sai Cohen' |
| FILE_DETAILS_UPDATED | File was updated | File 'macro_01_admin.rec' of type 'MACRO' UPDATED in App 'Banking' by user 'Sai Cohen' |
| FILE_DOWNLOADED | File was downloaded | File 'macro_01_admin.rec' DOWNLOADED from App 'Banking' by user 'Ari Patel' |
| FILE_DELETED | File was deleted from the app | File 'macro_01_admin.rec' DELETED from App 'Banking' by user 'Sai Cohen' |