Retrieve Keycloak admin events to view operations performed by admins, such as user attribute updates, role assignments, and client configuration changes. Useful when user events do not reflect the changes.
Run a Keycloak health check: review login failures, active sessions, password updates, and admin events from the past hours, and flag high single-IP failure rates as warnings.