Is there an option to log and monitor analyst and admin activities on the SA console?
The requirement is that any activity performed by analysts or the admin itself (local or LDAP) be logged and available for auditing.
Using the ‘Global Auditing’ function, there is auditing performed. These activities can be reported and alerted on.
In Version 11.3.1 (not released yet) there has been a huge improvement in the overall auditing subsystem. This greatly enhances what is logged and makes reporting much easier.
I will be posting more about this, including some examples in the next few days.
Sure Dave, thanks
Retrieving data ...