User activity log¶

Activity log overview¶

On the Settings → Activity log tab of the Wallarm Console, you can check the history of user actions in the Wallarm system. The logs include information about creating, updating and deleting the following objects:

• IP address or subnet from the network perimeter

• Domains from the network perimeter

• Services (ports) from the network perimeter

• Domains and associated IP addresses from the network perimeter

• Two‑factor authentication

• Users

• Traffic processing rules

• Cloud WAF nodes

• Triggers

• Integrations

• Blocked IP address

• Hit sampling

The logs also include information on the following actions and objects:

• Vulnerability marked as the false positive

• Rechecked attack

Filter the activity log records¶

The following parameters can be used to filter the activity log records:

• Case sensitive data on the user performed the action

  If the action was performed by the Wallarm technical support team, the username is Technical support. This value cannot be used to sort the activity log records.

• Action type

• Name of the object on which the action was performed

• Date when the action was performed