Open Activity and search for Cancel or Delete. A Cancel · Scan or Delete · Scan entry names the actor and the time. A delete entry also shows the target id and the trigger. You can only see entries your role allows.
Steps
- Click Activity.
- Click the search box. Type Cancel to find stopped scans, or type Delete to find the ones that someone removed from the list for good.
- Find the entry titled Cancel · Scan or Delete · Scan. The actor on the left is the person who did it.
- Read the time in the footer.
- For a delete entry, read the chips. They show the Target id and the Trigger, which was manual in the entries we saw.
- Check the short id at the bottom of the entry. It is eight characters long, so compare it with the start of the scan's id.
Good to know
A cancelled scan stays in Recent Scans with the result Cancelled. A deleted scan leaves that list, which is why the Activity feed is the place to look when a run goes missing. Deleting a scan keeps the target's findings, so you lose the run itself but not the issues that earlier scans proved on that target. See why findings remain after a delete.
| Entry | What it tells you |
|---|---|
| Start · Scan | Who began the run, plus the target and profile |
| Cancel · Scan | Who stopped it, and when |
| Delete · Scan | Who removed it, and the target id |
- You see only what your role allows. Nothing found? Ask an admin with wider access.
- To see who began a run, open Recent Scans and read the Run by column. See how to see who ran a scan.
- The feed acts as an audit log, so keep the evidence if you need an internal review.
Related guides cover searching the activity feed and cancelling a running scan, which is the action that leaves a Cancel entry behind. Still nothing? Ask us through the contact page.
Related questions
- How do I search the activity feed for a person or action?
- How do I see what's been happening in my workspace?
- How do I see who started a scan?
- How do I cancel a running scan?
- How do I delete a scan run?
Cyberlop activity feed: what it records and how to use it for audits
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.