How are user logins and actions logged in DE when a user logins using Web Service (SOAP) application?

Products

• DSERIES- SERVER
• CA Workload Automation DE - System Agent (dSeries)

Issue/Introduction

The CA Workload Automation DE (dSeries) will log all user logins and actions in the Auditlog.  Even if the tracelog is set to essential, the tracelog may not log all the actions, the Auditlog will always capture them.

How are login and actions information kept in auditlog when users connect via Web Service call?

Environment

CA Workload Automation DE R12 or R11.3

Resolution

When a user login from the Desktop Client, the auditlog will show normal login message like this:

Date and Time	Correlation Id	Request/Response	User ID	Command Type	Command Name	Command/Result
20171101 12:23:15.738	cxxxxxxx-a7ec-xxxx-b31d-xxxxxxxxxxxx	req	NITIN	action	wss connect	Connect to Workstation
20171101 12:23:17.835	axxxxxx-6d5e-xxxx-8bf2-xxxxxxxxxxxx	req	NITIN	application	delete application	DEMOU_1
20171101 12:23:17.840	axxxxxx-6d5e-xxxx-8bf2-xxxxxxxxxxxx	resp	NITIN	application	delete application	StandardResponse[statusMessage=Application DEMOU_1 successfully deleted, statuscompletioncode=SUCCESS, statusmessageid=AMS00005, infomessages=(), payload=null]

The above messages show a user connection and an application being deleted from Desktop Client.

The following messages shows a user 'demou' connects and performs an action using Web Service (SOAP).

20171101 12:23:27.519	2xxxxxxx-82f7-xxxx-xxxx-xxxxxxxx	req	demou	web service	delete artifact	requestCorrelationId=2007130423, userId=demou, artifactType=APPLICATION, identifier=DEMOU_1
20171101 12:23:27.519	bxxxxxxx-dc1e-xxxx-xxxx-6xxxxxxx	req	DEMOU	application	delete application	DEMOU_1