Hello,
You can see if a policy was changed and by which SecureSphere user by going to Monitor-> System Events Filter by Subsystem = Config.
Also you can enable comments when a policy is changed and encourage commenting what changes were made. You can enable them in: Admin -> System Definitions -> Policy Settings -> Enable comments for security policy changes.
Hope it helps,
------------------------------
Sabajete Elezaj
SNT Albania
------------------------------
Original Message:
Sent: 01-15-2021 06:06
From: angie pek
Subject: Logs enquiry
What is being captured in the imperva log? Will change in security policy activity in MX being logged?
#DatabaseActivityMonitoring
------------------------------
angie pek
------------------------------