Command Logs

There are four types of internal logs provided for threatER applications:

1. Packet Logs show connections by IP, Country and ASN in Enforce
2. Domain Logs display connections by Domain in Enforce, if DNS encryption is not used for the connection
3. System Logs show notices, errors and emergency alerts for the Enforcer
4. Audit Logs are available in both Enforce and Portal and provide user activity or changes within each instance of threatER

Packet, Domain, System and Enforce specific Audit Logs are only available in Enforce.

Audit Logs in the Portal, or Command Logs, show a running history of actions taken by users of the Portal system. This can be useful for auditing and troubleshooting user changes made in the Portal. Any insights into IP or ASN activity (allowing, blocking, etc) should be investigated in the Enforce console under Logging > Internal Logs. 

Command Log includes the date of the action, the user that made the changes, the initiator's type, the module or section of the Portal where the changes were made, the action taken and a brief message or description of the changes.

Module Descriptions

Action Descriptions