Are there any PAM log that includes detailed connection information?

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

Within CA PAM, are there any logs which include recent detailed connection information like the PAM user, target device and target account?

Environment

CA PAM 2.x/3.x

Resolution

The Session Logs under Sessions > Logs includes detailed session/connection information similar to the following:

PAM userId
PAM appliance
Client IP Address
Connection type (i.e. ssh)
Target device
Target account
User Groups

If for some reason the Session Logs are not available the Analytics Logs also include recent session/connection information similar to the above.

The analytics.log can downloaded from the following:

2.x: Config > Diagnostic > Analytics Logs > Download Analytics Log File
3.x: Configuration > Diagnostics > Diagnostics Logs > Download > Analytics Logs > Download