PIM/PAMSC : Terminal is blank for outbound network log
Article ID: 145267
Updated On:
Products
CA Privileged Identity Management Endpoint (PIM)
Issue/Introduction
The source terminal doesn't appear in TCP outbound audit log.
---
10 Oct 2019 00:52:31 P LOGIN root 59 2 <SOURCE HOST> SSH
10 Oct 2019 00:52:47 P TCP ssh root 408 3 <REMOTE HOST> /usr/bin/ssh
---
The <SOURCE HOST> should appear at the last of the TCP log.
---
10 Oct 2019 00:52:31 P LOGIN root 59 2 <SOURCE HOST> SSH
10 Oct 2019 00:52:47 P TCP ssh root 408 3 <REMOTE HOST> /usr/bin/ssh
---
The <SOURCE HOST> should appear at the last of the TCP log.
Cause
Product Defect
Environment
CA PIM - Unix: 12.8 SP1 CP2
CA PAMSC - Unix: 14.1 CP2
Resolution
This is fixed by T5C1173 on 12.8 SP1.
Additional Information
The workaround is to check sessionID for TCP log and find login log with same sessionID and see the source host.
Please be aware that sessionID will be changed after restarting PIM/PAMSC.
Please contact Technical Support to get testfix.
Please be aware that sessionID will be changed after restarting PIM/PAMSC.
Please contact Technical Support to get testfix.
Feedback
Yes
No
Powered by
