Where to find user login details in IT Process Automation for auditing.

Products

• CA Service Management - Asset Portfolio Management
• CA Service Management - Service Desk Manager
• CA Process Automation Base

Issue/Introduction

We have IT Process Automation 4.3.05 with CP01 with EEM 12.6, EEM is integrated with AD over LDAP.
Is it feasible to know the login details (last login, time stamp) from EEM or Application.

It is required for Audit purpose.

Environment

Component : Process Automation 4.3.5.

Resolution

User login details will be captured in c20.log file, Only by enabling the ITPAM logging configuration with "INFO" options. 

Follow below steps to enable auditing:

Step1 : To enable INFO level logging, open the log4j.xml file located in the /PAM/server/c2o/conf folder with a text editor.

Search for JXTA and in that section where JXTA appears as shown here:

   <!-- A size based file rolling appender for C2O and JXTA Logs-->
   <appender name="C2OFILE" class="org.jboss.logging.appender.RollingFileAppender">
   <errorHandler class="org.jboss.logging.util.OnlyOnceErrorHandler"/>
   <param name="File" value="${jboss.server.home.dir}/log/c2o.log"/>
   <param name="Threshold" value="WARN"/>
   <param name="Append" value="true"/>
   <param name="MaxFileSize" value="50000KB"/>
   <param name="MaxBackupIndex" value="3"/>

Change 

<param name="Threshold" value="WARN"/>

to

<param name="Threshold" value="INFO"/>

 

Step2 : Next, search for "root" - no quotes. In the section that appears for root shown below:

 

   <!-- ======================= -->
   <!-- Setup the Root category -->  
   <!-- ======================= -->

   <root>
<priority value="WARN" />
        <appender-ref ref="CONSOLE"/>  
        <appender-ref ref="C2OFILE"/>    
        </root>

Change

<priority value="WARN" />

to

<priority value="INFO" />

Step 3: No restart of services required.

Note: Please take a back of the file before committing the change.