Change History

Reading time: About 2 minutes

Change History tracks all historical modifications to security policies and Analysis & Logs configurations, so you can audit what was changed, when the change was made, and who made it.

Path: Change History

Filtering Records

You can filter records by the following conditions:

• Time Range: Select the period you want to view.
• Hostname: Filter change records for a specific hostname.
• Operator: Enter the operator’s account. If the change was deployed automatically by the system, the operator is shown as system.
• Configuration: Select the configuration module you want to view.
• Change Type: Add / Edit / Delete

Viewing Change Record Details

After filtering, the system displays the change records that match your criteria. Click Change Time to view the following details:

Next Steps

• If you need to trace a record back to its specific policy, go to Security Settings > Policies to view the current configuration and adjust it as needed.
• If you discover an anomalous change and need to investigate responsibility, cross-reference the Attack Logs for the same time period to verify the protection actions taken.