User activity log¶

On the Settings → Activity log tab of Wallarm Console, you can check the history of user actions in the Wallarm system. The logs include information about creating, updating and deleting the following objects:

• IP address or subnet from the network perimeter

• Domains from the network perimeter

• Services (ports) from the network perimeter

• Domains and associated IP addresses from the network perimeter

• Two‑factor authentication

• Users

• Traffic processing rules

• Custom ruleset backups

• Wallarm nodes

• CDN nodes

• Triggers

• Integrations

• Blocked IP address

• Hit sampling

The logs also include information on the following actions and objects:

• Vulnerability marked as the false positive

• Rechecked attack

To filter the activity log records, you can use the following parameters:

• Case sensitive data on the user performed the action

  If the action was performed by the Wallarm technical support team, the username is Technical support. This value cannot be used to sort the activity log records.

• Action type

• Name of the object on which the action was performed

• Date when the action was performed