Feature ideas

Some customers would like the option to automatically report Port's information to an external SIEM system for security concern. https://www.ibm.com/topics/siem#:~:text=Security%20information%20and%20event%20management,chance%20to%20disrupt%20business%20operations . First and most important are the changes of Port's audit log

Changes made to integration configs today (for example - the mapping or setting of an integration) are not displayed in an audit log tab of their own. Adding this information would make troubleshooting easier, it would also make it easier to return or review previous configurations of an integration that worked and use that as a reference to make additional updates

As a Platform Engineer launching a new dashboard in the Port catalogue I'd like to 1) track adoption and usage of the new dashboard/page and 2) have access to data so I can integrate my surveying tooling to survey the users who use the new dashboard. For big picture context. We are also a customer of DX who have a product called PlatformX. We have integrated this into our Self Service Actions. When a user (Bob) runs a self-service action via Port an event is fired off to DX saying that Bob did X event. DX looks to see if Bob is eligible for surveying based on the action (event) taken and if valid will send a survey to them personally on teams (MS Bot framework). This gives a very low friction option for Bob to provide feedback they might have otherwise not raised. We'd like to perform a similar integration but for important pages in the catalogue, like a newly launched dashboard. So, the user experience might be that Bob accesses the new port dashboard page for the first time and sometime later is pinged on teams saying "Hey we saw you used the ABC dashboard for the first time. Could you let us know what you thought etc..." Currently we don't have access to data that tells us who has accessed what pages in the catalogue at what time. Could this data/event telemetry be made available?

Currently the audit log only shows when an action's permissions were updated, but it doesn't show what the actual permission changes are. This is crucial for debugging permission issues and tracking changes.

Currently, there is no way to edit current action logs. A possible solution will be to return a message ID when posting a log through the API, and implementing a new route to patch messages based on the ID. This will help keep the logs cleaner and save a lot of space.

Make it possible to see login attempts (both successful and unsuccessful) in an organization's audit log

In addition to the general action runs audit log, a specific audit log for each action will be added to the "audit log" page Each action log will display as columns the general details of each run (ID, status, start, end) and also the specific inputs of the action inputted by the user who executed it.

Currently I can see that a change to a User or Team was made, I cannot see who made it. The audit log record only shows "updated by": "port-internal" as in the screenshot as opposed to an actual user. This is important for compliance auditing

Provide audit log functionality for pages so that we can track which users create/edit/delete things like dashboards.