History, notifications, audit
Read the state-history timeline for any resource.
5 lessons.
Read in order, or jump to what you need.
The state-history timeline
By the end of this lesson, you will be able to trace any resource's last 30 days of state changes and explain what each transition represents.
Reading the trigger column
By the end of this lesson, you will be able to interpret every trigger value in the state-history column and distinguish schedule, manual, override, auto-remediation, and drift events.
Slack / Teams / Google Chat notifications
By the end of this lesson, you will be able to configure notification channels and route different event types to different channels.
Notification severity and routing
By the end of this lesson, you will be able to assign the right severity to each event class and design a routing strategy that delivers the right signal without alert fatigue.
Where audit logs live and how to query them
By the end of this lesson, you will be able to query the audit log for specific events and explain what is captured in request and response bodies.