What does the "system" chip mean in the activity feed?

The short version

Most rows show a person's email on the left. A few show a small system chip instead. That chip marks an automatic action, one that the app carried out without anyone clicking a button at that moment.

How it works in Cyberlop

Each row on the Activity page has an actor, a title in the form "Action · Entity", detail chips, a time and a short ID. For human actions the actor is a user email. For support staff it is a name plus an email. For automatic actions it is the chip.

Our capture shows one such row. The title is "Create · Scan Profile" and the actor is system. A single detail chip, Name, gives the profile's name. Because we saw only that example, we cannot list every action that gets the chip. Treat the feed in your own workspace as the source of truth.

What to do next

1. Study the title and the Name chip to see what changed.
2. Match the time against your own work. A profile you saved around then is the likely cause.
3. Type system into the search box to list the rows with this actor.

If a system row does not match anything your team did, send the row's short ID and time through the contact page. You can also compare it with the full list of actions in the feed, or learn more about the record itself in audit log.

Related questions

• How do I see what's been happening in my workspace?
• How do I search the activity feed for a person or action?
• Which actions show up in the activity feed?
• Who can see which entries in the activity feed?
• What is a Support Session entry in the activity feed?

Full tutorial

Cyberlop activity feed: what it records and how to use it for audits

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre