Linux Audit · audit
Linux Audit syscall
Kernel audit syscall records include identity, architecture, return status and process context.
Log sources tagged audit
Log sources tagged audit. Browse source profiles associated with audit.
Matching source profiles
Linux Audit · audit
Linux Audit command arguments
EXECVE records describe arguments associated with an audited exec call.
Linux Audit · audit
Linux Audit object paths
PATH records describe objects associated with a kernel audit event.
Linux Audit · audit
SELinux AVC denials
SELinux access-vector-cache messages record an access-control decision and security contexts.
AWS · json
AWS CloudTrail
CloudTrail log-file envelope containing API activity records.
AWS · json
AWS WAF
Web ACL request evaluation records.
AWS · json
AWS API Gateway — configured access JSON
Access log object generated by a configured context-variable template.
Azure · json
Azure Activity Log
Azure control-plane activity exported as structured events.
Google Cloud · json
Google Cloud Audit Logs
Cloud Logging LogEntry carrying an AuditLog protoPayload.
Google Cloud · json
Google Cloud VPC Flow Logs
Sampled network flow records within a Cloud Logging LogEntry.
Microsoft · json
Microsoft Entra service-principal sign-ins
Diagnostic export of service-principal authentication activity.
Microsoft · json
Microsoft Entra directory audit
Directory audit events exported through Azure diagnostics.
Okta · json
Okta System Log
Identity platform events with actor, client, outcome and target context.
Google · json
Google Workspace login audit
Admin SDK Reports API login activity.
Google · json
Google Workspace administrator audit
Admin SDK Reports API administrative activity.
GitHub · json
GitHub audit log
Organization or enterprise audit event export.
Microsoft 365 · json
Microsoft 365 Exchange audit
Unified audit record for the named Microsoft 365 workload.
Microsoft 365 · json
Microsoft 365 SharePoint audit
Unified audit record for the named Microsoft 365 workload.
Kubernetes · json
Kubernetes API audit event
API-server audit Event describing a request stage.