Audit Log Reports
Activity occurring in Falcon Expert is audited and logged. You can access reports of your logged activity from the Audit Log Reports pane of Falcon Expert.
To generate a report of your activities, you select a Report Type from the Audit Log Reports pane and then specify search criteria for the items to be included in the report.
The following Audit Log Reports are available:
- Versioning—Activity related to versioning of rules and rulesets (check out, check in, cancel checkout, lock release).
- Workflow—Activity that results in changes to the workflow state of rules and rulesets.
- Covered Topics
- Running an Audit Log Report Query
Generating an audit report of the activities you performed in Falcon Expert involves selecting a report type and one or more report subtypes, and defining report scope by specifying values for additional criteria such as date range and status.