Illumio Auditable Events Workbook
The Illumio Auditable Events Workbook shows a count of audit events, tampering events, and port scan events.
From the Time drop-down, select the time range for which you want to fetch flows.
Top Auditable Events: This is a bar graph of all auditable events by event type.
Change Monitoring contains the following widgets:
Workloads affected by policy changes: This depicts workloads that were affected by security policy changes, the list of modified objects per policy version, the commit message, and the time generated.
Changes by Resource Type: This displays the count of auditable events by resource types.
Changes by User: This displays the count of auditable events per user.
PCE events breakdown per hour: This displays the trend of auditable events by event type per hour.
Authentication events: This section presents all authentication events. You can include or exclude certain groups of events and can filter by severity and status.
Illumio Auditable Events Workbook
Workloads Affected by Policy Change
PCE Events Breakdown - Every Hour