Insights
Always auditable. Operations you can see.
Four log streams, each with a summary strip, live refresh, filters, export and its own retention. Pulse shows health and what needs attention on one page. Live Sessions shows who is connected right now, with sign-out everywhere in one action.
- log streams
- 4
- Audit, Traffic, ZERA Access and Browser Security, each with export and retention.
- action to sign out everywhere
- 1
- Identity sessions, devices, Secure Sessions and browser sessions end together.
- default view
- 24 h
- Every log opens on the last day, with the summary strip above the rows.
Logs
Four streams, one standard
| Log | What it records | Typical question |
|---|---|---|
| Audit Logs | Every administrative action: who changed what, and when | Who disabled this rule last Tuesday? |
| Traffic Logs | Connections devices made and refused, with the Access Rule that decided each | What did this laptop talk to yesterday? |
| ZERA Access Logs | Every launch and request through the gateway, with identity, country and verdict | Who opened the finance application from outside the country? |
| Browser Security Log | Blocked and observed controls, warnings, watermark tampering, extension lifecycle | Did anyone try to paste into the payroll system? |
Every stream has a summary strip, live refresh, filters, export, and retention you set in Logs Settings. Event Forwarding streams them to your SIEM.
Operations
Pulse: health, attention and activity on one page
A health verdict that is never shown green for something nobody measured, what needs attention, and live access activity across every path.
control.organisation.example
- A health verdict, measured components only
- Service health for the platform, the private network, ZERA and every agent
- Live access activity through each path, and what was refused
- Live FabricThe private network as a live topology: devices, routing devices and the paths between them, as they are right now.
- Live SessionsWho is connected through the agent, the Workspace and Secure Sessions. Sign a person out everywhere in one action.
- PlatformYour own service footprint on a map, with measured probes for every component, per point of presence.
Evidence
Proof, not just logs
- Session EvidenceEvery Secure Session recorded on the server, keystrokes optional, replayed in the Control Center with markers.
- ExportEvery log exports the rows you filtered, for an auditor, a ticket or a spreadsheet.
- Retention you setPer stream, in Logs Settings, with size caps for Session Evidence. Your tenant keeps it; nothing leaves.
- Event ForwardingStream every log to your SIEM as events arrive, so your existing detection and reporting see Inlinea too.
Questions buyers ask
Where are the logs stored?
In your own tenant, for the retention you set per stream. Export them at any time; Event Forwarding streams them to your SIEM.
Can an auditor see logs without changing anything?
Yes. The auditor role reads every log and every setting and can change none of them.
What does sign out everywhere end?
The person's identity sessions, their devices' agent sessions, their Secure Sessions and their attested browser sessions, in one action from Live Sessions.
Why does health show unknown instead of green?
Because a component nobody measured is not known to be healthy. Pulse and Platform show green only for a probe that passed.