Workflow Evaluations Now in SIEM Logs

🌟New Feature Alert 🌟

You can now get even more context from your SIEM! We’ve expanded SIEM logging to include workflow evaluations, giving your security team deeper visibility into automated decision-making.

What’s New?

• In addition to threat-related events, SIEM logs now also include workflow evaluations — so you can trace the logic and decisions behind automated pre-authentication responses.

  

• Configuration: Head to Settings → SIEM Logs to enable workflow logging for your specific SIEM setup.

  • Datadog
  • Splunk
  • Webhook

Why Does This Matter?

• ✅ Greater Transparency – Know why an action was taken, not just what happened.
• 🔎 Easier Troubleshooting – Understand the full flow of events across detection and response.
• 🧠 Smarter Tuning – Use workflow logs to improve your automation logic and threat responses.