Use the Audit Log

When multiple users are working in the BigPanda platform, it’s vital to see historic information on system configuration changes. The Audit Log enables BigPanda admins to keep track of configuration change actions across the BigPanda platform. Using the Audit Log, admins can search for specific actions and filter the list of actions based on criteria such as timeframe, users, and action categories.

BigPanda audit logs reports on Create, Update, and Delete actions for these resources:

• Alert Correlation
• Alert Enrichment
• Alert Filtering
• API Keys
• AutoShare
• Environment
• Integrations
• JIT Provisioning
• Maintenance Plans
• Roles
• SAML Attribute Mapping
• SSO Configuration
• SSO Test
• User Management

Actions are added to the audit log in near real-time, appearing as the action is completed in the system.

📘

Audit Log retention policy

BigPanda retains audit log data for the duration of your contract. See the Data Retention documentation for more information about retention policies.

🚧

Change tracking

Audit logs track changes to specific fields for each resource. Changes to other fields (such as a permissions change for an environment) will not be visible in the audit log.

👍

Additional resources

Additional resources within BigPanda will be coming to the audit logs soon.

Audit Logs can also be accessed via API. See the Audit Logs API documentation for more information.

Key features

• View a list of configuration changes and actions that occurred within BigPanda.
• Determine which user made a configuration change to the system.
• Sort and drill down into specific actions
• Filter logs and search for a specific action.

Relevant Permissions

Roles with the following permissions can access the Audit Logs screen:

Permission access levels can be adjusted by selecting either View or Full Access. To learn more about how BigPanda's permissions work, see the  Roles Management guide.

View the Audit Log

The Audit Log can be accessed from within BigPanda at Settings > Audit Log. The following information appears in the Audit Log screen:

To view additional details, click any action in the list on the Audit Log page. Detailed information about the changed object and the user who made the change appears on the page.

Filter

The Audit Log can be filtered by User, Action, Category, Object Name, or Date to adjust your results.

To filter the Audit Log, select one of the options above the Audit Log table. Depending upon the filter selected, choose an option from the drop-down menu, or type into the box to narrow the results. Multiple filters can be applied at the same time.

To remove all filters, click Clear All.

Sort

The Audit Log can be filtered by User, Action, Category, Object Name, or Date to change the order of your results. From within the Audit Log table, select one of the options from the top of each column to change the sort order.

Sort is turned off when you are drilled down into a log. To change sort options for the list, collapse the selected log by clicking the down arrow in the log detail ribbon.

User Information

At the bottom of the details of each action, information about the BigPanda user who made the change appears. The following information about the user is available:

Available Resources

Audit logs track actions taken on individual resources within BigPanda. The following resources are available to track via the audit log:

Alert Correlation

Correlation patterns allow you to correlate related alerts into incidents for visibility into high-level, actionable issues. For more information, see Manage Alert Correlation.

Alert Enrichment

Enrichment is the process of adding contextual information to alerts in BigPanda. See Manage Alert Enrichment for more information.

Alert Enrichment Audit logs report on several sub-objects including:

• Tag
• Tags Order
• Tag Enrichments
• Tag Enrichments Order
• Mapping Enrichment
• Mapping Table Upload

Tag

Tags Order

Tag Enrichments

Tag Enrichments Order

Mapping Enrichment

Mapping Table Upload

Alert Filtering

Alert filtering allows you to prevent low-relevancy alerts from being correlated into incidents. See Manage Alert Filtering for more information.

API Keys

​​API Keys​​ are used to securely authenticate calls to the BigPanda Public API.

AutoShare

AutoShare rules can be configured to share BigPanda incidents through email or integrated channels to notify your team of critical issues, automatically create tickets, or loop in team members who don’t use BigPanda. See Manage AutoShare for more information.

Environment

Environments group related incidents together for improved automation and visibility. See Manage Environments for more information.

Integrations

Integrations allow you to shorten and automate incident triage by creating high quality alerts and actionable incidents. For more information, see Integrate with BigPanda.

JIT Provisioning

​​JIT Provisioning​​ allows you to define the domains associated with your IdP, and select default BigPanda user roles for newly created accounts from each SSO domain.

Maintenance Plans

Maintenance plans reduce unnecessary noise by marking and silencing alerts triggered by system maintenance. See Manage Planned Maintenance for more information.

Roles

​​Roles​​ and permissions control the levels of access to different features in BigPanda.

SAML Attribute Mapping

With ​SAML Attribute Mapping​​, you can use properties from your IdP to automatically map roles to an account in BigPanda whenever an existing user logs in.

SSO Configuration

You can configure an SSO integration to manage your organization’s BigPanda users via a third-party identity provider. See ​Single Sign-On​​ for more information.

SSO Test

SSO Test tracks when a user tests the SSO connection from the Single Sign-On screen during the configuration process.

User Management

User management allows administrators to manage who can access your organization's data in BigPanda. See User Management for more information.