Forum Discussion
7 Replies
- michaelsaw
Cato Professional Services
Hi MaheshMJ,
Currently, configuration changes are logged in Audit trail.
Would you like/be looking at receiving notifications based on Audit Trail logs?Thank you.
- MaheshMJ
Joining the Conversation
yes, we would like to receive notifications on audit trail logs
- michaelsaw
Cato Professional Services
Hi MaheshMJ,
Appreciate your feedback.
There is an existing solution using Cato API to access/collect the Audit trail logs: https://support.catonetworks.com/hc/en-us/articles/360017900857-Cato-API-AuditFeed
Would this be alright?
Thank you.
- Joe
Joining the Conversation
Hi
We definitely would like that!
- michaelsaw
Cato Professional Services
Hi Joe,
Gotcha!
Perhaps you may like to reach out to your assigned Cato Representative and consider submitting and RFE.Cheers
- PrakashRIndia
Staying Involved
Yes, email notifications should be sent for making any changes by Admin so that other admins or CISO is aware of any such changes and even regulator sometimes ask about the same.
- Nath
Staying Involved
The only problem I would see is that the events shown within the existing Audit Trail in CMA are voluminous, and not easy to decipher in terms of 'before' and 'after'.
Try doing a few changes in the CMA and check the Audit Trail and you will see what I mean. For a single change, you can see many events.
So just be careful if you are sending emails for the audit events as you may get overhelmed and not easily see what has actually changed.