Audit Logging Capability in WPA

ptc-3814449 · ‎May 28, 2014

Per security requirements for large customer organizations, it would be desirable to have some means to track which users access which data for historical purposes. This is akin to the Security Audit Reporting feature in Windchill PDMLink.

There needs to be some traceability for:

What system events took place (create/edit/view/rename/delete/etc)
Which objects were affected (name/number/identifier)
Date and timestamp of event
IP address of the client
User account performing the action

Ideally, having a UI for users in Administrator groups to run an audit report would be the best case scenario.

MarkWilliford · ‎Jun 16, 2014

Windchill Product Analytics provides an access log that may have the information you require. Actions on the server are logged under the %WPA_HOME%/virgo-server/logs/accessLogs directory.

The access.log files created by the application capture much of the information listed above. Here is a sample set of output from a test server: In the logs, the admin user created a new user and viewed the information page for the user. Then the new user logged in and view a company part followed by navigating to a related supplier part.

The uri provides information on the action that occured and where possible provides the object ID of the affected object. The timestamp, client IP address, user account and locale of the user are also provided.

[2014-06-03 12:57:19.289] [user=null][locale=en][host=127.0.0.1][uri=/productanalytics/login]

[2014-06-03 12:57:28.087] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/welcome]

[2014-06-03 12:57:32.611] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/search/simple/types]

[2014-06-03 12:57:35.481] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/security/users/new]

[2014-06-03 12:57:50.988] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/search/simple/types]

[2014-06-03 12:58:24.247] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/security/users/new]

[2014-06-03 12:58:26.493] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/security/users/107601]

[2014-06-03 12:58:38.692] [user=null][locale=en][host=127.0.0.1][uri=/productanalytics/login]

[2014-06-03 12:58:43.840] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/welcome]

[2014-06-04 13:32:25.404] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/search/simple/new]

[2014-06-04 13:32:25.576] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/companypart/search/92e0f252-16f3-4b81-9754-c0deeaf3a691/results]

[2014-06-04 13:32:26.028] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/companypart/108541]

[2014-06-04 13:32:37.603] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/search/simple/types]

[2014-06-04 13:32:38.305] [user=mwilliford][locale=en][host=127.0.0.1][Ajax=true][uri=/productanalytics/ec/companypart/108541/info]

[2014-06-04 13:32:42.642] [user=mwilliford][locale=en][host=127.0.0.1][Ajax=true][uri=/productanalytics/ec/companypart/108541/supplierparts]

[2014-06-04 13:32:43.516] [user=mwilliford][locale=en][host=127.0.0.1][Ajax=true][uri=/productanalytics/ec/companypart/cmpinfo/spps/config]

[2014-06-04 13:32:48.196] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/supplierpart/108601]