Audit log & SIEM streaming

A tamper-evident record of everything that matters — and a live feed into your security tooling.

Tamper-evident audit #

Every administrative action is written to a hash-chained audit log. Because each entry commits to the previous one, silent edits are detectable — the property behind 21 CFR Part 11 / Annex 11 style controls.

SIEM streaming #

Stream audit events in real time to Splunk HEC and Datadog natively, and to Microsoft Sentinel or any SIEM via a generic HTTPS collector.

Setup #

1. Open Audit & Alerts → SIEM.
2. Choose your format and paste your HTTP endpoint and token.
3. Send a test event to confirm delivery.

What if… #

• Events aren't arriving — re-run the test; check the endpoint/token and that your SIEM accepts the format.
• SIEM isn't available in your console — it may not be included in your plan.