Skip to main content

Audit & Syslog Forwarding

The audit trail

Every user action and configuration change is recorded in an immutable audit trail. Browse it under Audit, filter by date, action, user, or resource, and open any event for the full before/after detail.

Forwarding to a SIEM

Forward audit events to an external collector under Settings → Syslog. Elchi speaks RFC5424 over UDP, TCP, or TLS, and includes a connection test so you can validate the destination before enabling it.