Audit portal user login activity

Products

• IT Analytics

Issue/Introduction

Is there a way to determine when portal users last logged-in to the IT Analytics (ITA) console?

Environment

Release : 2.9.1

Component : Portal

Resolution

Portal user authentication activity can be audited via IIS logs, which are saved in the following path on the IIS (application) server:

%SystemDrive%\inetpub\logs\LogFiles

Portal user authentication will be identified by entries similar to the following:

2022-06-16 21:17:25 W3SVC2 ita ::1 GET /ITAnalytics/Services/AuthenticationService.svc/rest/Authenticate _dc=0123456789012 80 <domain\username> ::1 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/102.0.5005.124+Safari/537.36+Edg/102.0.1245.41 ITAnalyticsReportViewer_SessionId=uzrn1qpxik3p1laylrajzuci http://localhost/ITAnalytics/ localhost 200 0 0 1391 948 204