Is there any way to find out which user added or deleted a device in Dx NetOps Performance Management ?

Products

• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

We need to track and identify the users responsible for adding or deleting devices in DX NetOps Performance Management

Understanding who performed these actions is essential for audit purposes, security monitoring, and troubleshooting.

Environment

Dx NetOps Performance Management any version

Resolution

In scenarios in DX NetOps Performance Management where you need to track who added or deleted a device, you can identify when a device was deleted by checking the deleted items log. However, note that this method has limitations and does not provide information on who performed the action.

Steps to Identify Device Deletion:

1. Locate the Deleted Items Log:

   • The deleted items log file can be found at the following path:
      

     /opt/IMDataAggregator/apache-karaf-<VERSION>/data/log/ItemDeletes.log

      
   • Replace <VERSION> with the specific version number of your Apache Karaf installation.

2. Check the Log for Deleted Devices:

   • Open the ItemDeletes.log file using a text editor or command-line tool to search for the deleted device entries.
   •  
   • Example command to view the log:
      

     cat /opt/IMDataAggregator/apache-karaf-<VERSION>/data/log/ItemDeletes.log

      
   • Example command to search for specific entries (if you know the item ID):
      

     grep 'ITEM_ID' /opt/IMDataAggregator/apache-karaf-<VERSION>/data/log/ItemDeletes.log

      
     Replace ITEM_ID with the actual ID of the device you are searching for.

3. Understand the Log Entries:

   • The log entries will show details about when a device was deleted, including the timestamp and possibly the item ID.
   • Example log entry format:
      

     [TIMESTAMP] - Item deleted: ITEM_ID

      
   • This information helps determine when a device was deleted but does not provide details about who performed the deletion.

Limitations:

• This method only helps if you know the item ID of the device you are investigating.
• The log file only shows when a device was deleted; it does not provide any information about who added the device or who deleted it.

Additional Information