Information on different types and location of PAM logs.

book

Article ID: 224050

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

Need information on the different PAM logs and locations.

Environment

Release :

Component :

Resolution

CSPM logs (PA)

The catalina logs will show you which cspm databases are inactive:

opt\cloakware\cspmserver_thirdparty\tomcat\logs

 

Session processing or recording (Jboss logs):

                var\log\jboss

 

Webpage errors or something like that you should look here. 

The php_error logs will show you whether the uag databases are out of sync.

var\log\php_error.log

 

Mount or some Xsuite service isn't available for example some hardware errors or kernel errors:

var\log\syslog

 

Problems with access page for example you can't establish connection to a device:

var\log\xcd_spfd.log

Any of the xcd_spfd logs will show you the full cluster configuration thousands of times over.

 

Session recording share or recording processing you should look here.

var\log\xcd_upd_handler.log 

              var\log\kern.log

              var\log\Jboss\debug

LDAP import errors:

var/log/ldap_importer/:

config/diagnostic/LDAP Sync Log Level to Verbose for more detailed logs.

Also check

var\log\php_error.log

 

Socket Filter Agent

Logs can be located: /var/log/gksfd.log

Note: For other errors, you have session > logs and java console log.

 

Remedy

/opt/cloakware/cspmserver_thirdparty/tomcat/webapps/ca-nim-um/WEB-INF/log/nim.log

Important

opt/cloakware/cspmserver_thirdparty/tomcat/logs/

 

The aactrl logs will tell you when the cluster was restarted last.

var/log/aactrl

cat var/log/aactrl | grep outage

 

This is one of the first things I check To see if there are any outages reported by aactrl which is normally accurate

tail -f /var/log/apache2/access.log – connection to

 

Password change logs on Linux server

/var/log/secure