EDR: User modifications not logged to useractivity.log
Article ID: 289948
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Activity like adding, editing and deleting users does not appear in useractivity.log
Environment
- EDR Server: 6.x and Higher
Cause
- API logging is not enabled
- By default only user authentication is logged
Resolution
Enable API logging: https://community.carbonblack.com/t5/Knowledge-Base/EDR-What-Type-of-Audit-Logging-is-Supported/ta-p/68477
Feedback
Yes
No
Powered by
