IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Admin Audit logging

    Posted 08/13/20 04:50 AM
    Hi, very quick question related to admin activity in the GUI, are the actions of administrators logged anywhere e.g modifying workflows, creating fields etc?

    ------------------------------
    Leon Goodwin
    ------------------------------


  • 2.  RE: Admin Audit logging

    Posted 08/14/20 05:00 AM
    Check out the following for a summary of whats logged for audit purposes at present. Its been an ongoing stream of work for a while now, but is on hold at present as some new feature changes will impact audit requirements.
    https://www.ibm.com/support/knowledgecenter/SSBRUQ_37.0.0/doc/install/inst_auditdesc.html

    ------------------------------
    MARTIN FEENEY
    IBM Resilient Product Manager
    IBM Security
    Galway
    ------------------------------