Audit and SIEM

Forward the audit record to a SIEM or a file and confirm that nothing is lost on the way.

• Sinks and SIEM adds a webhook or file sink, confirms delivery and replays a parked event.

Evidence and audit explains the audit chain itself, and Events and the audit record lists every event it holds.

• The sentinel turns the sentinel on and tunes it.