• DETECTION
  • RECONSTRUCTION
  • REPORTING
  • HUMAN

How to search security audit logs with your AI

Connect Pangea to your AI client to turn messy event histories into clear, searchable answers. You stop digging through raw logs and start asking questions.

Ask AI about this page

Short answer

Can I search security logs with my AI?

Yes. You use natural language to query Pangea's tamper-proof event history. Your AI pulls the relevant data and identifies patterns or anomalies for you. You get a clear breakdown of what happened and who did it.

The outcomes.

What your AI finds for you.

The AI handles the heavy lifting of scanning through massive event streams.

DETECTION

Spot suspicious activity

The AI scans logs for specific user actions or unauthorized access attempts. You get a summary of the red flags immediately.

RECONSTRUCTION

Map out event timelines

Your agent pulls sequential logs to show exactly how an incident unfolded. It turns scattered entries into a coherent story.

REPORTING

Summarize audit findings

The AI condenses thousands of log lines into a few readable sentences. You get the facts without the noise.

HUMAN

Verify critical alerts

The AI flags the most important discrepancies for you to review. You decide if the identified pattern requires a manual response.

The workflow

What your AI does when a query arrives.

Your AI acts as the interface between your questions and the raw security data.

  1. Identify the target

    The AI determines which specific logs or timeframes match your natural language request.

    audit_search

  2. Fetch the data

    It pulls the raw event details from the Pangea history based on your search parameters.

    audit_search_results

  3. Analyze the sequence

    The agent looks through the retrieved entries to find specific patterns or missing links.

    audit_log

  4. Present the answer

    The AI translates the technical log data into a plain English explanation of the event.

    audit_search_results

Try it

Copy these to start.

Use these prompts to begin your investigation.

Starting points

These are templates. Swap out the bracketed info with your specific user IDs, IP addresses, or time ranges.

Pangea Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_6PGcCGWSsRTH8ftWAASrBfIUfCx2NlDoXWkeA96h/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Pangea capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "pangea-security-apis-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_6PGcCGWSsRTH8ftWAASrBfIUfCx2NlDoXWkeA96h/mcp"
    }
  }
}
Copy into chat04

  • Show me all login attempts from IP address 192.168.1.1 in the last 24 hours.

  • Find all administrative changes made by user 'admin_user_01' last Tuesday.

  • List all failed authentication attempts that happened between 2:00 PM and 4:00 PM.

  • Summarize the recent activity for the service account 'deploy_bot' regarding permission changes.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Pangea once, then ask.

One connection gives your AI access to your security event history. Your credentials stay encrypted and secure on our side.

Connect Pangea to your AI

FAQ

How the search behaves

  • 01

    Can the AI delete or modify my audit logs?

    No. The tools only allow the AI to read and search existing logs. It cannot change or delete any security data.

  • 02

    Does the AI have permission to change user settings?

    No. This Connector is strictly for querying and analyzing audit history. It does not have tools to modify user permissions or system configurations.

  • 03

    How does the AI handle large amounts of log data?

    The AI uses search tools to filter the data first, then processes the specific results to give you a concise answer.

  • 04

    Can I use this to find specific IP addresses?

    Yes. You can ask the AI to find all events associated with a specific IP address or user ID.

  • 05

    Is the log data tamper-proof?

    Yes. The AI is reading from Pangea's tamper-proof event history, ensuring the data hasn't been altered.

  • More questions about Pangea? The Connector page answers them. See everything the Pangea Connector can do

Connect Pangea to Claude, Cursor, ChatGPT & more