User history

[jabi27]

Hi
How can I create - if possible ? - a list showing user activity? Login / out etc ?

Best

/Jan

[jbrunkow]

I believe that you may find the information you are looking for in the access log. Run the following command from your XI server connection to print the contents of that log to the terminal.

Code: Select all

cat /var/log/httpd/access_log

This is the Apache access log. Failed authentications, ajax requests and page views will log here.

NAGIOS LOGS

[jabi27]

Hi

Thanks. There is no access file. We might missed that on the installation?. Where should we enable this to comply with Nagios settings ?

---------------------------------------
root@nagios-logserver2:/etc/apache2/sites-enabled# cat nagioslogserver.conf
DocumentRoot /var/www/html
Alias /nagioslogserver "/var/www/html/nagioslogserver/www/"

<Directory "/var/www/html/nagioslogserver/www/">
Options FollowSymLinks
AllowOverride All
Require all granted
</Directory>

RewriteEngine on
RewriteCond $1 !^(index\.php|scripts|media|app|js|css|img|font|vendor|config.js)
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule nagioslogserver/(.*)$ /var/www/html/nagioslogserver/www/index.php/$1 [L,QSA]
-------------------------------------------------

Best

/Jan

[jbrunkow]

I'm sorry, I was looking at XI by mistake.

Do you see any access logs in /var/log/httpd?

Code: Select all

cat /var/log/httpd/access_log*

[jabi27]

I see it but it is emty:

Code: Select all

cd /var/log/apache2
root@nagios-logserver2:/var/log/apache2# ls -l access.log 
-rw-r----- 1 root adm 0 Feb  9  2019 access.log

Best

/Jan

[jbrunkow]

Please try this command to look in some other locations that Apache commonly puts the access log.

Code: Select all

/var/log/apache* /var/log/http*

This command will look in the configuration files to see what access log is defined there.

Code: Select all

cat /usr/local/etc/apache22/httpd.conf /etc/apache2/apache2.conf /etc/httpd/conf/httpd.conf | grep CustomLog

You could also locate it using the command below.

Code: Select all

locate access.log access_log

Apparently the access log location varies based on what operating system you have running. The following are the default locations for a few Linux distributions that are commonly used as servers.

RHEL / Red Hat / CentOS / Fedora

Code: Select all

/var/log/httpd/access_log

Debian / Ubuntu

Code: Select all

/var/log/apache2/access.log

FreeBSD

Code: Select all

/var/log/httpd-access.log

I hope that helps!

[jabi27]

Hi

root@nagios-logserver2:~# cat /usr/local/etc/apache22/httpd.conf /etc/apache2/apache2.conf /etc/httpd/conf/httpd.conf | grep CustomLog
cat: /usr/local/etc/apache22/httpd.conf: No such file or directory
cat: /etc/httpd/conf/httpd.conf: No such file or directory
# a CustomLog directive.
root@nagios-logserver2:~#

--- can I phone somebody at the support ? This is not good and our DPO ... are banning Nagios...

Best

/Jan

[benjaminsmith]

Hi Jan,

How can I create - if possible ? - a list showing user activity? Login / out etc ?

My apologies for the inconvenience here, and happy to help you get this worked out.

Does the Audit Log Report meet your requirements? Go to Admin > Reports > Audit Log and use the SECURITY filter to pull details on user activity (see attached screenshot).

If not please let know what other information you're trying to pull.

Regards,
Benjamin

[jabi27]

Hi

Thanks,

Exactly

Best

/Jan

[benjaminsmith]

Hi Jan,

Excellent!

We'll go ahead and mark this as resolved, but feel free to open another post if you have any new questions.