We will like to gather information on probe deactivate / activate activity in UIM. How to audit any deactivation or activation of probe in UIM?
When you bring up the Audit probe UI, you will see when a probe was deactivated and removed.
Check under 'ALL, Last day.'
You should see entries like this: Event type Event time Event description Origin Domain Hub Robot Probe User name User command User IP Status Configuration changes Checkpoint ID User command.
Reference: Audit probe documentation