Locating Playbook Trigger Change Logs in the Red Canary Portal

Issue

Customer needs to identify who made changes to a playbook trigger. The customer can see the change log, but it only shows the original author of the trigger, not the user who edited it. The customer also checked Security audit logs without success.

Environment

Red Canary automation

Resolution

The Automation Configuration Summary page contains the trigger and playbook audit logs, which display the author of the changes, the date and time the changes were made, and which conditions were added or deleted.

1. Navigate to the Automation Configuration Summary page: https://go.my.redcanary.co/automate/configuration_summary
2. In the Triggers section, locate the specific trigger.
3. The audit log at the bottom of the trigger's section will show a detailed history of changes.

Note: If a condition is deleted, the log will show "deleted" and the original author, not the person who performed the deletion. This behavior can be confusing.