Once you’ve started sending events into your Audit Log, it’s time to explore some of the advanced functionality.
Display Templates
Display templates allow you to customize the display of audit events, after the event has been received. The events are still immutable. The display templates implement a rules engine that is applied when the event is rendered. This simply adds an additional field to the event, and can be excluded at any time.
Streaming Events With SSH
SSH Event Streaming allows Enterprise API users to stream events as they occur over ssh using an Enterprise API Token.
Tracking Application Versions
Tracking Application Versions adds additional parameters to Create Event requests to allow the Audit Log to make better guarantees about when certain actions did not occur.