Auditing user access to Harvest system

Products

• CA Harvest Software Change Manager - OpenMake Meister
• CA Harvest Software Change Manager
• CA Harvest Software Change Manager - OpenMake Meister

Issue/Introduction

We are being audited and we are looking for a way to find out if a particular user accessed the system in a specific time frame.

Environment

Harvest Software Change Manager all versions

Resolution

The options are: 

• The audit log is a set of tables in the Harvest database that tracks several different types of activities.  One of the things it tracks is a history of all *unsuccessful* login attempts.  This query will show failed login attempts:
  
  

  SELECT AUDITEVENTOBJID, 
  ACTIONOBJID, 
  SUCCESSFAILURE, 
  ACTIONNAME, 
  TO_CHAR(EVENTTIME, 'mm/dd/yyyy hh:mi:ss') EVENTTIME, 
  USROBJID, 
  USERNAME 
  FROM HARAUDITLOGVIEW 
  WHERE ACTIONOBJID = 411;

  
  
  
• In the database, the HARUSER table records the last time the user successfully logged in to the system. But this will not show a history of every login attempts by a specific user.  This query will show the last successful login of each user: 
  
  

  SELECT HARUSER.USROBJID, 
  HARUSER.USERNAME, 
  TO_CHAR(HARUSER.LASTLOGIN, 'mm/dd/yyyy hh:mi:ss') LASTLOGIN; 
  FROM HARUSER

  
  
  
• If the HBroker log files exist in the %CA_SCM_HOME%\log folder for the desired time frame, another option would be to search the broker log files (file name format is <date>HBroker<pid>.log) for entries like this: 
  
  

  - Default: On User register - <time> 
  From : /pt_HClient://<computername>/<pid> 
  User : <userid> 

  
  Any attempt to login will have an entry like this in the broker log files. 
  
  
• If you're looking for a specific type of activity, the audit logs will record certain things like create/update project, state, user, packate, etc.
  
  
• We can also search the various main tables for any records last updated by the desired user. All the main tables like HARPACKAGE, HARENVIRONMENT, HARSTATE, HARVERSION, etc have these fields: 
  
  CREATIONTIME 
  CREATORID 
  MODIFIEDTIME 
  MODIFIERID 
  
  But, again, it only shows the last update, not a history of all updates.

Additional Information

More information on the Harvest Audit Log is found here: Administrate Data - Audit Log