Audit Trails
Audit trails are available for alerts and cases in the Unit21 system.
Audit trails report all changes that occur including:
- the event that occurred or the action taken - tag added, case opened...
- the agent responsible if applicable
- the date and time of the event
Alert Audit Trail

Audit Trail for alerts include:
- Alert creation
- Alert status (open/close)
- Alert changes (tags, queues, assignments, attachments/media, collaborations, actions/workflows)
Note changes and Investigation checklist changes are not reported.
Case Audit Trail

Audit Trail for cases include:
- Case creation
- Case status (open/close)
- Case changes (tags, assignments, attachments/media, collaborations, actions/workflows)
- Reports created
Note changes and Investigation checklist changes are not reported. Watchers are not reported.
Updated about 1 year ago