Troubleshooting
The event and debug logs can be used for troubleshooting:
The Event logs are generated for the device related anomalies:
- Anomalous traffic from IoT devices
- Potential malware
You can use the User Access and Admin Logs in case of any issues. The user access logs are generated whenever there are any user related anomalies such as user logging from new location/device/new user. The Admin Logs are generated whenever there is a change with Behavioral Analytics options and if there are any changes with respect to application policies.
You can also use Maintenance > Troubleshooting > Monitoring > Debug Log for debugging issues. Enable debug log with events ueba.