Overview

Admin Center maintains audit logs of configuration changes, authentication events, API key lifecycle, policy pack updates, and governed remediation approvals. Export logs for SOC 2 and internal compliance reviews.

Who should read this

QA engineers, SREs, platform teams, and developers operating Zof Console and APIs.

When to use this workflow

Onboarding new team members to Zof terminology and workflows
Authoring internal runbooks aligned with Console labels
Designing CI/CD or webhook integrations against documented behavior

Step-by-step procedure

Access audit log

Admin Center → Audit → filter by actor, action type, and date range.

Export for review

Export CSV or JSON for SIEM ingestion where integration is configured.

Retain exports per your log retention policy.

Key concepts

Configuration change: Role assignment, integration connect/disconnect, agent enablement toggle.
Governance event: Release gate override, remediation approval/denial, policy violation record.

Best practices

Forward audit logs to corporate SIEM for enterprise deployments
Review privileged actions weekly