Users Audit

[DavidBourcier]

Hi @,



Our customers is asking us to audit some stuff about users like :



- How many users concurrent users are connected during the day

- What user never logged in ( AD users via IE connector )



Where can I find this ? Is there any way to automate those kind of tasks ?



Thanks in advance for your feedback.

Cheers!

[mreece]

As WCADMIN, you can run a Security audit report, and select login/logout as the events. This will give you concurrent user information:
[cid:image001.png@01CC3AFB.EADB1390]

[JohnRozanc]

You can also edit your <windchill>\codebose\registry\auditing\configAudit.xml file to turn on/off some OOTB auditing rules.

[MikeLockwood]

OTB, configAudit.xml is set to record only:

- Login

- Two other events: "Logout" (no activity after allotted time) and "Context Login" (access a certain Product / Library, etc.)
[cid:image001.png@01CC3AEC.CF803300]


wt.session.SessionUserAuditEvent/login

This info is stored in the database AUDITRECORD table

From Site, Utilities, Security Audit Reporting, this info is available to query and report on- but only if you have not purged the records using the Audit Log Purge Manager function (purging removes (and optionally stores in a zip file) all records for a time period).

It's also possible to query the database directly - which allows this to be scripted and automated. One sample:
[cid:image002.png@01CC3AEE.3D58F7D0]

If it's desired to see exactly when a user logged on, one can manipulate the date output to include Hours, Minutes, Seconds.

[cid:image003.png@01CC3AEE.AB38DE00]

Note that this also lends itself to analysis (possibly in Excel) to determine the number of concurrent users over time - no other way that we're aware of.