diff --git a/content/en/account_management/audit_trail/_index.md b/content/en/account_management/audit_trail/_index.md index d42e412b2cc..314d16adfa5 100644 --- a/content/en/account_management/audit_trail/_index.md +++ b/content/en/account_management/audit_trail/_index.md @@ -135,7 +135,7 @@ Notable events are a subset of audit events that show potential critical configu {{< img src="account_management/audit_logs/notable_events.png" alt="The audit event facet panel showing notable events checked" style="width:30%;">}} -Events that match the following queries are marked as notable. +Events that match the following queries are marked as notable. You can also retrieve all notable events using the query `is_notable_event:true`. | Description of audit event | Query in audit explorer | | ------------------------------------------------------------------- | --------------------------------------------------| @@ -148,6 +148,7 @@ Events that match the following queries are marked as notable. | Creations and deletion of RUM applications | `@evt.name:"Real User Monitoring" @asset.type:real_user_monitoring_application @action:(created OR deleted)` | | Changes to Sensitive Data Scanner scanning groups | `@evt.name:"Sensitive Data Scanner" @asset.type:sensitive_data_scanner_scanning_group` | | Creation or deletion of Synthetic tests | `@evt.name:"Synthetics Monitoring" @asset.type:synthetics_test @action:(created OR deleted)` | +| Activation, deactivation, and modification of Product Analytics for applications | `@evt.name:"Product Analytics" @asset.type:product_analytics @action:(enabled OR disabled OR modified)` | ### Inspect Changes (Diff)