Activity Logs

Tenable Attack Surface Management logs all system events for your account and groups them based on timestamp and actor. You can access the logs using the Activity Logs page. You can filter events by timestamp, action, actor, or target.

To view all user activity logs:

  1. In Tenable Attack Surface Management, in the upper-right corner, click the button.

    The Activity Logs page appears with the following details.

    Column Description
    Created at The date and time of the event.
    Action The actual system event.
    Actor

    The column lists one of the following categories associated with the event.

    • Automation Rule

    • Exclusion Rule

    • Daily Job

    • Weekly Cleanup Job

    • User email
    Target The ID of the event target. For example, dashboard ID and asset ID.
    Description A description of the event. For example: An asset was archived.

  2. Use the filter query box to filter events.

    1. Click inside the filter query box.

      A drop-down menu with the column name options appears.

    2. Select a column name.

      A list of available filter types appear.

    3. Select a filter type from the list.

      Filter Type Description
      is Filters for events that match the selected filter value.
      is-not Filters for events that do not match the filter value.
      is-one-of

      Filters for events that match one of the filter values.

      Note: Separate the filter values by commas without any spaces. For example, actor is-one-of x,y,z.
      is-not-one-of

      Filters for events that do not match any of the filter values.

      Note: Separate the filter values by commas without any spaces. For example, actor is-not-one-of x,y,z.
      starts-with Filters for events that start with the filter values.
      ends-with Filters for events that end with the filter values.
      contains Filters for events that contain the filter value.
      does-not-contain Filters for events that do not contain the filter value.
      is-unknown Filters for events that have unknown value.
      has-any-value Filters for events that have any value.
      more-than Filters for events that match a value for more than a specific number of days.
      exactly Filters for events that match an exact value.
      less-than Filters for events that match a value less than the specified number.
      after Filters for events that occurred after a specific date.
      on Filters for events that occurred on a specific date.
      before Filters for events that occurred before a specific date.
      is-unknown Filters for events that with an unknown value.
      has-any-value Filters for events that with any value.

    4. Provide the values for the selected type.

    5. To query using multiple criteria, use the AND or OR operators.

    6. Click Set.

      Tenable Attack Surface Management displays the filtered events.