Product: Huntress Portal UI
Environment: Huntress Dashboard
Summary: The Huntress Portal now supports audit logging, allowing for partners to track and report on actions taken in the portal.
Overview
Before You Begin
How to Access Audit Logs
Overview
The Huntress portal logs select configuration change actions that occur in the portal to allow partners to track and report on actions taken in the portal. The audit log feature leverages the power of the Huntress SIEM solution to provide storage and search capabilities.
Before You Begin
Audit logging is turned on automatically the first time an auditable event is created. No action is required to configure or enable audit log events.
How to Access Audit Logs
Audit logging can be accessed in one of two ways. Either via the Hamburger Menu Drop Down, or via the SIEM Dashboard.
Option 1: Audit Log Drop Down
The first is to choose the “Audit Log” item from the Hamburger menu. This will take you to the SIEM dashboard and show audit logs for the last 48 hours by default.
Option 2: SIEM Dashboard
The second method is to click on the SIEM icon on the left side navigation bar and choose SIEM dashboard.
From the dashboard page you can run a query from the search bar or one of the starter queries by clicking on the Starter query button. Custom searches of audit logs can be performed using ES|QL.
