Skip to content

See who changed what

For AI agents

An agent reads the audit log of one cluster with the tool audit_log, and counts its rows with count_audit_log. A change by an agent has the user mcp:<name>, and each tool call has a row with the action MCP tool call. Use the MCP server tells more.

The Audit log

  1. Open the Audit log from the side menu. It lists each change: when, who, what and the target. A settings change shows the old and the new value of each setting that changed.
  2. To see the changes of one person, filter by user. To see the changes of a team, select more than one user.
  3. To see one type of change, filter by action, for example Bulk triage. One bulk change is one entry in the Audit log. You can select more than one action, for example Acknowledged and Resolved.
  4. To save the entries as a file, select Export CSV. Your role must allow export. If it does not, the button is not available, and the text next to it tells you why.

The history of one finding

  1. Open Findings, and open a finding.
  2. The Activity card shows each change on this one finding, with who and when. A bulk change that included this finding also shows, with the state and the note that it set.

For more help, open the Guide from the side menu of JAVV.