Exporting IAIso audit trails

When this applies

Compliance audit, incident investigation, or regulatory submission needs a packaged, immutable audit trail for a specific time window.

Steps To Complete

1. Define the window. UTC, inclusive start, exclusive end. Document the timezone explicitly.

2. Pull from the durable archive, not the live sink. If you JSONL+shipper, that is your archive. If you SIEM directly, the SIEM's export is the source.