Hello,
The audit module that we are running records actions made by users, but currently fails to display critical actions such as creating, modifying or deleting users, groups, roles, etc.
I say “critical” because our cybersecurity unit wants to ingest in their SIEM logs of all actions taken, and design scenarios to detect suspicious activity.
Would anyone have heard of a solution to this obligation of tracing all activity on Icinga (including users and api, Director and icinga2)?
Thank you,
Jean
