Audit
System Mode only — System administrators view platform-wide audit logs and manage compliance.
System Mode Audit shares the same screens as the regular Audit, but collects and records security events at platform-wide scope rather than being limited to a single domain.
Audit vs System Mode Audit
| Aspect | Audit (Regular) | Audit (System Mode) |
|---|---|---|
| Audience | Domain admins | System administrators |
| Scope | Events within a domain | Platform-wide events (all domains) |
| Access | Signum → Audit | System Mode → Audit |
| Retention policy | Domain retention settings | Platform default retention policy |
Access Required
System Mode requires system administrator privileges. Regular domain administrators cannot access it.
Key Features
| Feature | Description |
|---|---|
| Event Collection | Automatically record all actions — sign-in/out, permission changes, resource creation/deletion |
| Immutable Logs | Collected event logs cannot be modified or deleted |
| Filtered Search | Query by user, event type, time range, and resource |
| Log Export | Download logs in CSV / JSON format |
| Retention Policy | Set log retention period (30 / 90 / 180 / 365 days) |
| Real-time View | Stream recent events in real time |
Recorded Event Types
| Category | Event Examples |
|---|---|
| Authentication | Login success/failure, MFA authentication, password change |
| Access Control | Role assignment/revocation, policy creation/edit/deletion |
| User Management | User creation/edit/deletion, group changes |
| Resources | VM creation/deletion, cluster changes, storage operations |
| Security Policy | MFA policy changes, session policy modifications |
| Key Management | KMS key creation/rotation/destruction |
INFO
Audit logs for IAM activities (user, role, policy changes) are managed in IAM → Event Logs, while platform-wide system events are managed on this page.