Logging: Audit quick filters

Quick filters let you rapidly select and apply commonly-used filters to narrow search results.
Audit log quick filters
Quick filter
Description
Features
Supported features are as follows:
  • EDR
    Any change that is made to the
    Settings > Global > Endpoint Communication Channel, SEP Policies, and Endpoint Activity Recorder
    configuration.
  • Synapse
    Any change that is made to the
    Settings > Global > Synapse
    configuration.
  • User Setting
    Any change that is made to the
    Settings > Users
    configuration. For example, adding, modifying, or creating a local user account.
  • User Session
    Any session activity, such as
    Symantec EDR
    logon, logout, and session expiration.