Table of Contents
The CyberFOX portal provides a centralized Audit Log where all platform events are recorded, including:
- User authentication (login/logout)
- Block page deletions
- Resource interactions
- Organization-specific actions
These logs allow admins to track user activity, validate policy enforcement, and export records for audits.
Accessing the Audit Log
- Log into the CyberFOX Admin Console.
- In the left-hand navigation menu, select Audit Log.
- The Audit Log dashboard will load with filtering options at the top and event data displayed below.
Filtering Audit Events
Available Filters
- Start Date / End Date: Maximum range of 1 month per query.
- Action: Filter by Login, Logout, Block Page actions, Admin tasks, and more.
- Organization: Select a specific tenant or sub-organization.
To Run a Filtered Query
- Enter your desired Start Date and End Date.
- Choose an Action or leave as All actions.
- Select an Organization or leave as All.
- Click Apply Filters.
Filtered results appear instantly in the results panel.
Understanding Audit Log Fields
Each record contains:
| Field | Description |
|---|---|
| Time | Timestamp (UTC) of the event |
| User | Username or email performing the action |
| Action | Type of event (Login, Logout, Blockpage_Delete, etc.) |
| Resource Type | The object affected, if applicable |
| Resource ID | Unique identifier of the resource |
| Organization | The organization where the event occurred |
Exporting Audit Logs
CyberFOX supports exporting the visible logs into CSV format for archiving or submitting to auditors.
To Export:
- Apply any filters needed.
- Click Export CSV (top right of the results panel).
- A CSV file download containing the results currently displayed.
This export can be ingested into SIEM tools, Excel, or compliance documentation.
Need Assistance?
If you need help interpreting logs or exporting for compliance purposes, you can contact the CyberFOX Support Team through your portal or submit a ticket.