Skip to main content

​
About the Activity Page

The Activity page shows a tenant-wide audit log of actions in Iru Endpoint. Review blueprint updates, device changes, library assignments, enrollment events, tag changes, and other Endpoint activity in one timeline.
This page shows Endpoint activity only. Unified Activity is in Preview and adds Detections, Vulnerabilities, Compliance, and Tenant events in one timeline.

​
How It Works

Activity events from across Iru Endpoint appear in one feed, sorted with the most recent events first. Each entry records what happened, who performed the action, and when it occurred. Device records, Blueprints, Library Items, Assignment Maps, and other objects may also have their own Activity tabs scoped to that object. Those events appear in this tenant-wide Activity feed as well.

​
Access the Activity Page

1

Open Activity

Click the Activity icon (pulse icon) in the top right navigation bar.
Activity icon in the top right navigation bar

​
Considerations

  • Alerts vs Activity: Alerts (bell icon) and Activity (pulse icon) both live in the top navigation bar. Alerts surface device and Parameter issues; Activity records administrative and configuration changes.

Unified Activity

Preview cross-product activity timeline across Endpoint, Detections, Vulnerabilities, Compliance, and Tenant.

Global Alerts

Monitor Parameter and Library Item alerts from the bell icon in the top navigation bar.

Amazon S3 Activity Log Integration

Export tenant activity events to Amazon S3 for SIEM ingestion, compliance retention, or offline analysis.