Skip to main content
P
ptc-38144491-Visitor
1-Visitor
May 28, 2014
Question

Audit Logging Capability in WPA

  • May 28, 2014
  • 1 reply
  • 946 views

Per security requirements for large customer organizations, it would be desirable to have some means to track which users access which data for historical purposes. This is akin to the Security Audit Reporting feature in Windchill PDMLink.

 

There needs to be some traceability for:

  • What system events took place (create/edit/view/rename/delete/etc)
  • Which objects were affected (name/number/identifier)
  • Date and timestamp of event
  • IP address of the client
  • User account performing the action

 

Ideally, having a UI for users in Administrator groups to run an audit report would be the best case scenario.

    1 reply

    M
    MarkWilliford14-Alexandrite
    14-Alexandrite
    June 16, 2014

    Windchill Product Analytics provides an access log that may have the information you require.  Actions on the server are logged under the %WPA_HOME%/virgo-server/logs/accessLogs directory.

    The access.log files created by the application capture much of the information listed above.  Here is a sample set of output from a test server:  In the logs, the admin user created a new user and viewed the information page for the user.  Then the new user logged in and view a company part followed by navigating to a related supplier part. 

    The uri provides information on the action that occured and where possible provides the object ID of the affected object.  The timestamp, client IP address, user account and locale of the user are also provided.

    [2014-06-03 12:57:19.289] [user=null][locale=en][host=127.0.0.1][uri=/productanalytics/login]

    [2014-06-03 12:57:28.087] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/welcome]

    [2014-06-03 12:57:32.611] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/search/simple/types]

    [2014-06-03 12:57:35.481] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/security/users/new]

    [2014-06-03 12:57:50.988] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/search/simple/types]

    [2014-06-03 12:58:24.247] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/security/users/new]

    [2014-06-03 12:58:26.493] [user=admin][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/security/users/107601]

    [2014-06-03 12:58:38.692] [user=null][locale=en][host=127.0.0.1][uri=/productanalytics/login]

    [2014-06-03 12:58:43.840] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/welcome]

    [2014-06-04 13:32:25.404] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/search/simple/new]

    [2014-06-04 13:32:25.576] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/companypart/search/92e0f252-16f3-4b81-9754-c0deeaf3a691/results]

    [2014-06-04 13:32:26.028] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/companypart/108541]

    [2014-06-04 13:32:37.603] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/search/simple/types]

    [2014-06-04 13:32:38.305] [user=mwilliford][locale=en][host=127.0.0.1][Ajax=true][uri=/productanalytics/ec/companypart/108541/info]

    [2014-06-04 13:32:42.642] [user=mwilliford][locale=en][host=127.0.0.1][Ajax=true][uri=/productanalytics/ec/companypart/108541/supplierparts]

    [2014-06-04 13:32:43.516] [user=mwilliford][locale=en][host=127.0.0.1][Ajax=true][uri=/productanalytics/ec/companypart/cmpinfo/spps/config]

    [2014-06-04 13:32:48.196] [user=mwilliford][locale=en][host=127.0.0.1][uri=/productanalytics/rdr/supplierpart/108601]

    Terms & ConditionsAccessibility statement