Audit Trails

Audit trails are available for alerts and cases in the Unit21 system.

Audit trails report all changes that occur including:

  • the event that occurred or the action taken - tag added, case opened...
  • the agent responsible if applicable
  • the date and time of the event

Alert Audit Trail

1600

Audit Trail for alerts include:

  • Alert creation
  • Alert status (open/close)
  • Alert changes (tags, queues, assignments, attachments/media, collaborations, actions/workflows)

Note changes and Investigation checklist changes are not reported.

Case Audit Trail

1600

Audit Trail for cases include:

  • Case creation
  • Case status (open/close)
  • Case changes (tags, assignments, attachments/media, collaborations, actions/workflows)
  • Reports created

Note changes and Investigation checklist changes are not reported. Watchers are not reported.