Viewing the audit log
As an administrator, you can view a log of actions that are taken by QRadar® EDR Dashboard users.
About this task
Important: Administrators with restricted access cannot view audit logs with actions that are made by an
administrator with unrestricted access or access to more than one client.
Procedure
- Click .
- To filter the actions, click Advanced Filters and select a date range, username, or action type.
- To download the audit log, click Export as CSV.