I'm looking for how to see audit history of web manager changes and logins. Through 7070 or 8443. If anyone knows which logs to look in or point me to a document that would be great. SS only shows manager changes apparently. This is for IPO Powered By 11.0.4.3 Thanks much!
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
How to track web manager changes
- Thread starter cdiris
- Start date
- Thread starter
- #2
Looks like what I needed was in this log file: \[system_logs].tar.gz\[system_logs].tar\var\log\rsyslog\127.0.0.1\[Date]\ipowebmanager_audit.log That at least tells me times that users logged in.
Avaya says this:
By default, IPO logs to internal syslog some details about the changes (Check IPO
config -> System ->System events -> Alarms tab ).
- Extended Audit Configuration change information- each message contains one
configuration or
security settings object attribute change, and optionally the previous and
new values. These can be viewed in web control -> Logs -> Syslog Event viewer ->
Event type: Audit.
Perhaps the best way is to pull them from system alarms with some logging software.
Avaya says this:
By default, IPO logs to internal syslog some details about the changes (Check IPO
config -> System ->System events -> Alarms tab ).
- Extended Audit Configuration change information- each message contains one
configuration or
security settings object attribute change, and optionally the previous and
new values. These can be viewed in web control -> Logs -> Syslog Event viewer ->
Event type: Audit.
Perhaps the best way is to pull them from system alarms with some logging software.
- Status
Similar threads
- Locked
- Question