Audit log
The audit log records the actions performed on the CLC Server. Included are actions like logging in, logging out, import, and the launching and running of analysis tasks. Data management operations such as copying, deleting and adding files are not Server actions and are thus not recorded.Audit log information is available via the web administrative interface under the Audit log tab. Here, details of user activities are given.
Audit information is also written to text-based log files. Upon the first activity on a given date, a new log file called audit.log is created. This file is then used for logging that activity and subsequent Server activities on that day. When this new audit.log file is created, the file that previously had that name is renamed to audit.<actual events date>.log.
The audit log files can be found under the Server installation area under webapps/CLCServer/WEB-INF.
Log files are retained for 30 days. When the creation of a new audit.log file is triggered, audit log files older than 30 days are checked for and deleted.
The audit log files are tab delimited file with the following fields:
- Date and time
- Log level
- Operation: Login, Logout, Command queued, Command done, Command executing, Change server configuration, Server lifecycle; more may be added and existing may be changed or removed.
- Users
- IP Address
- Process name (when operation is one of the Command values) or description of server lifecycle (when operation is Server lifecycle)
- Process identifier - can be used to differentiate several processes of the same type.