Skip to main content
Information logged in audit trail
Information logged in audit trail
  • Empuls logs key metadata for every significant action, including user ID, role, tenant, timestamp, source IP/device, API endpoint or screen, and operation type (view, create, update, delete).
  • These logs are written to a central, append-only logging backend (and forwarded to SIEM where enabled), with retention aligned to Xoxoday’s security and compliance policies.

Events recorded in audit logs

  • Authentication events: all login/logout attempts (successful and failed), MFA challenges, SSO assertions, and session timeouts are captured with reason codes.
  • Privileged and sensitive actions are explicitly tracked, such as user creation/deactivation, role or access-profile changes, configuration changes, data exports, reward/budget approvals, and any log administration activity, giving your organisation a tamper-evident trail for investigations and audits.
Learn more: Empuls Help Centre

Does Empuls log and review security events in real time?

Empuls logs all security-relevant events—login attempts, privileged activity, and config changes—near real time, scaled to each resource’s risk level.

Empuls' User Logins and Integrate with Siem Solutions

Empuls logs every login with timestamp, IP address, and device data, and integrates with SIEM tools like Miral via API for centralized security…