Mender blog

New hosted Mender release: Audit logs

As always, security and robustness is the prime directive of Mender and yet this new release for hosted Mender is another testament to that directive.

We are happy to announce that Mender Enterprise now supports Audit logging!

Audit logs are an important cornerstone for improving security, compliance and accountability by logging important events that can later be analyzed in case of security or operational incidents. This can greatly help in security impact analysis, as well as post mortem analysis in order to avoid similar issues happening in the future.

For example, if there is a support incident where certain devices do not operate properly, the audit log can be used to check if any recent deployments were made against them, and if so, who created the deployment and when.

The Mender Audit log creates immutable log entries when key events occur, including:

  • Deployment created
  • User created
  • User changed (e.g. role or password)
  • User removed

In all these cases, a comprehensive set of attributes are logged such as which user performed the action, what change was, and the time. To retrieve the logs, a new user interface has been added to the Mender web UI.

In order to inspect suspicious activity from a specific user, it supports filtering by the user performing the actions.

You can also filter by change type, for example to see audit log entries of all deployments to Production.

As always, all functionality is also available through the Mender REST APIs, so it is easy to integrate Mender Audit logs into other systems you have, such as collecting them into a SEIM system for correlation with other applications.

Recent articles

Service Provider tenant: SSO enhancements

Service Provider tenant: SSO enhancements

Learn more about the Single Sign-on (SSO) enhancements in the new Service Provider tenant in Mender Server 4.0.
Be one of the first to try Mender on ESP32 with Zephyr

Be one of the first to try Mender on ESP32 with Zephyr

An overview of the preview release of Mender on ESP32 with Zephyr. The new offerings for Mender for RTOS systems.
Simplifying multi-tenant device management with the Service Provider tenant

Simplifying multi-tenant device management with the Service Provider tenant

A deep dive into the Service Provider tenant. The Service Provider tenant offers multiple use cases to effectively scale devices with tenant separation.
View more articles

Learn why leading companies choose Mender

Discover how Mender empowers both you and your customers with secure and reliable over-the-air updates for IoT devices. Focus on your product, and benefit from specialized OTA expertise and best practices.

 
sales-pipeline_295756365