Are there any PAM log that includes detailed connection information?

book

Article ID: 103264

calendar_today

Updated On:

Products

CA Privileged Access Manager - Cloakware Password Authority (PA) PAM SAFENET LUNA HSM CA Privileged Access Manager (PAM)

Issue/Introduction



Within CA PAM, are there any logs which include recent detailed connection information like the PAM user, target device and target account?

Environment

CA PAM 2.x/3.x

Resolution

The Session Logs under Sessions > Logs includes detailed session/connection information similar to the following:

PAM userId
PAM appliance
Client IP Address
Connection type (i.e. ssh)
Target device
Target account
User Groups

If for some reason the Session Logs are not available the Analytics Logs also include recent session/connection information similar to the above.

The analytics.log can downloaded from the following:

2.x: Config > Diagnostic > Analytics Logs > Download Analytics Log File
3.x: Configuration > Diagnostics > Diagnostics Logs > Download > Analytics Logs > Download