Puremessage on Unix - Questions about logging user authentications on UI

Hi Bob,

I'm logging info like this:

10.0.0.10 - User_Name [11/Aug/2010:12:27:50 -0700] "GET /Quarantine/Manage/ HTTP/1.1" 200 20970

In /opt/pmx/var/log/manager/access_log

I don't think I've had to enable anything special, though I've not really had to change much since installing this a couple of years ago.

HTH.

Erric

Erric,

I see similar activity in /opt/pmx/var/log/manager/access_log , but it all seems to relate to the manager interface and only show administrative user's.

We're interested in seeing the usernames of the users that log in to the quarantine user interface.

Activity for both UI and Groups sessions appear to be logged to /opt/pmx/var/log/manager /httpd_access_log , but the username is not logged, only originating IP.

I'll dig a bit more, but any suggestions are more than welcome.

Bob

After doing a bit of digging, it appears that  the quarantine UI is not using apache authentication, so apache can't log the user name.

It is using a cgi to do the authenticaiton and session tracking.  I haven't dug into the code enough, and I may not have the time to do so, at least right now.

I'm wondering though, if session information is stored somewhere, maybe in the DB?  I'm not at all interested in modifiying the cgi, but would like to know if the session information is stored somewhere, somehow, so we can determine user activity for both the quarantine UI and the groups interface.

Thanks,

Bob

Hi Bob,

Yes the information is stored in the DB in the session table.  The email address if using flat file will be listed.  Also the timing will be in epoch so converting that to your local time will be required.

-Jason

Jason,

Thanks!

I've looked at the session information and by combining that with the information in /opt/pmx/var/log/manager /httpd_access_log, gives us what we need to know.

Bob