IBM DataPower Operations Dashboard v1.0.21.x

Web & Admin Consoles Audit Log

The Web Console and the Admin Console audit records are written to their log files.

The audit records include the following information:

ValueDescription
Time stampThe time stamp that an action was done.
For example: 05/02/2017 18:18:30,839
Action execution time (ms)The action execution time in milliseconds.
User IP AddressThe IP address of the user that performed the action (for customers over NAT the actual IP may be the NAT service)
User IDThe DPOD logged in user ID that performed the action
ActionThe action description.
For example: addUser(userName=User1)

Enabling Audit Log

Audit logs are enabled on DPOD by default.

To disable or enables this logs follow the steps above and restart UI and Admin consoles using Command Line Interfacer (CLI).

In order to export the audit records to an external system, use file transfer mechanism (scp) to copy the logs off the product's server.

Enable Audit Logs

sed -i 's/^export OD_AUDIT_LOG_LEVEL=.*/export OD_AUDIT_LOG_LEVEL="info"/g' /etc/init.d/MonTier-UI
sed -i 's/^export OD_AUDIT_LOG_LEVEL=.*/export OD_AUDIT_LOG_LEVEL="info"/g' /etc/init.d/MonTier-AppAdmin

Disable Audit Logs

sed -i 's/^export OD_AUDIT_LOG_LEVEL=.*/export OD_AUDIT_LOG_LEVEL="error"/g' /etc/init.d/MonTier-UI
sed -i 's/^export OD_AUDIT_LOG_LEVEL=.*/export OD_AUDIT_LOG_LEVEL="error"/g' /etc/init.d/MonTier-AppAdmin

Audit Records Example

05/06/2018 18:18:30,839- DEBUG o.m.u.w.f.AuditFilter [ajp-bio-8070-exec-1]   51    192.168.65.190  admin           getSystemParameters()  
05/06/2018 18:18:34,183- DEBUG o.m.u.w.f.AuditFilter [ajp-bio-8070-exec-1]   8     192.168.65.190  admin           getUsers()
05/06/2018 18:18:46,277- DEBUG o.m.u.w.f.AuditFilter [ajp-bio-8070-exec-1]   40    192.168.65.190  admin           addUser(userName=User1)
05/06/2018 18:18:46,304- DEBUG o.m.u.w.f.AuditFilter [ajp-bio-8070-exec-1]   8     192.168.65.190  admin           getUsers()

Copyright © 2015 MonTier Software (2015) Ltd.