> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/knowledge-base/english/logging/which-activities-are-recorded-in-the-enginsight-user-log.md).

# Which activities are recorded in the Enginsight user log?

Enginsight logs various user activities, which you can view centrally in the platform under **Dashboard** → [Activities](https://docs.enginsight.com/docs/manual/english/platform-usage/dashboard/activities). This allows you to track how individual users use the Enginsight platform and which changes have been made there.

The following actions can be shown in the user log:

<table data-header-hidden><thead><tr><th width="330.93359375">Action</th><th>Description</th></tr></thead><tbody><tr><td>AUDIT_CREATED</td><td>A penetration test audit was performed.</td></tr><tr><td>ALERT_CREATED</td><td>An alert was created.</td></tr><tr><td>ALERT_UPDATED</td><td>An alert was edited.</td></tr><tr><td>ALERT_REMOVED</td><td>An alert was removed.</td></tr><tr><td>APPEASEMENT_CREATED</td><td>A user manually resolved a vulnerability or configuration issue (appeasement).</td></tr><tr><td>APPEASEMENT_DELETED</td><td>A user reverted an appeasement.</td></tr><tr><td>ENDPOINT_CREATED</td><td>An endpoint was created.</td></tr><tr><td>ENDPOINT_UPDATED</td><td>An endpoint was edited.</td></tr><tr><td>ENDPOINT_REMOVED</td><td>An endpoint was deleted.</td></tr><tr><td>GROUP_CREATED</td><td>A group of team members was created.</td></tr><tr><td>GROUP_UPDATED</td><td>A group of team members was edited.</td></tr><tr><td>HACKTOR_CREATED</td><td>A Hacktor was installed.</td></tr><tr><td>HACKTOR_UPDATED</td><td>The settings of a Hacktor were adjusted or the version was updated.</td></tr><tr><td>HACKTOR_REMOVED</td><td>A Hacktor was deleted.</td></tr><tr><td>HOST_CREATED</td><td>A host was added.</td></tr><tr><td>HOST_UPDATED</td><td>A host was edited.</td></tr><tr><td>HOST_REMOVED</td><td>A host was deleted.</td></tr><tr><td>OBSERVER_CREATED</td><td>An Observer was installed.</td></tr><tr><td>OBSERVER_UPDATED</td><td>The settings of an Observer were adjusted or the version was updated.</td></tr><tr><td>OBSERVER_DELETED</td><td>An Observer was deleted.</td></tr><tr><td>PLUGIN_CREATED</td><td>A plugin (a custom script that can be executed on hosts) was added.</td></tr><tr><td>PLUGIN_UPDATED</td><td>A plugin was edited.</td></tr><tr><td>PLUGIN_DELETED</td><td>A plugin was deleted.</td></tr><tr><td>PLUGIN_SCHEDULED_CREATED</td><td>A schedule was created for executing a plugin.</td></tr><tr><td>PLUGIN_SCHEDULED_UPDATED</td><td>The scheduled execution of a plugin was edited.</td></tr><tr><td>PLUGIN_SCHEDULED_DELETED</td><td>The scheduled execution of a plugin was deleted.</td></tr><tr><td>ROLE_CREATED</td><td>A role for users was created.</td></tr><tr><td>ROLE_UPDATED</td><td>A role for users was edited.</td></tr><tr><td>ROLE_DELETED</td><td>A role for users was deleted.</td></tr><tr><td>TARGETGROUP_CREATED</td><td>The target systems for a penetration test were defined.</td></tr><tr><td>TARGETGROUP_UPDATED</td><td>The target systems for a penetration test were edited.</td></tr><tr><td>TARGETGROUP_DELETED</td><td>The target systems for a penetration test were deleted.</td></tr><tr><td>USER_CREATED</td><td>A new user was created.</td></tr><tr><td>USER_UPDATED</td><td>A user's settings were changed.</td></tr><tr><td>USER_REMOVED</td><td>A user was deleted.</td></tr><tr><td>USER_LOGGED_IN_SUCCESSFULLY</td><td>A user logged in successfully.</td></tr><tr><td>USER_LOGGED_IN_UNSUCCESSFULLY</td><td>A user's login attempt failed.</td></tr><tr><td>USER_PASSWORD_CHANGED</td><td>A user's password was changed.</td></tr><tr><td>WATCHDOG_CREATED</td><td>A Watchdog was installed.</td></tr><tr><td>WATCHDOG_UPDATED</td><td>The settings of a Watchdog were adjusted or the version was updated.</td></tr><tr><td>WATCHDOG_REMOVED</td><td>A Watchdog was deleted.</td></tr><tr><td>WEBHOOK_CREATED</td><td>A webhook was created.</td></tr><tr><td>WEBHOOK_UPDATED</td><td>A webhook was edited.</td></tr><tr><td>WEBHOOK_DELETED</td><td>A webhook was deleted.</td></tr></tbody></table>

***