Once you’ve started sending events into your Audit Log, it’s time to explore some of the advanced functionality.
Display templates allow you to customize the display of audit events, after the event has been received. The events are still immutable. Display templates implement a rules engine that is applied when the event is rendered in the embedded viewer.
Streaming Events With SSH
SSH Event Streaming allows Enterprise API users to stream events as they occur over ssh using an Enterprise API Token.
Tracking Application Versions
Tracking Application Versions adds additional parameters to Create Event requests to allow the Audit Log to make better guarantees about when certain actions did not occur.