Reference I: Audit logging - Administrator Guide - Cortex XSIAM - Cortex Cloud Posture Management - Cortex CLOUD - Cortex - Security Operations

Cortex XSIAM 3.x Documentation
Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-11
Category
Administrator Guide

All policy actions are recorded in the Management Audit Logs:

Action

Audit Log Entry

Create Policy

Records the policy name, type, and creating user

Edit Policy

Records the modified fields and the editing user

Delete Policy

Records the policy name and the deleting user

Enable/Disable Policy

Records the status change and the user who performed the action

Navigate to Settings → Configurations → Management → Audit Logs to review policy audit entries.