Skip to main content

Currently, the only way to check the SOAR audit logs is going directly to SOAR Settings->Advanced->Audit. In this console it is possible to see who did what, when, and where. How could I configure an alert so that when somebody deletes or modifies one of the playbooks, an alert is sent? maybe shipping the logs to Cloud Logging? Thank you!

 

 

Hi @keso, currently, the only possible way is utilizing API (same from Settings -> Advanced -> Audit). I recommend you reach out to Support to make a feature request. 


Reply