Audit records for changes in WAMUI

Document ID : KB000009751
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

Customer wants to have audit records to show what login user have done within the WAMUI

Environment:
Policy server: R12.52
Instructions:

1) Make the parameter "LogObj" to TRUE using XPSConfig -> SM

2) Add the DWORD “Enable Enhance Tracing” in the registry as per following KB

https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC485123.html?intcmp=searchresultclick&resultnum=2

3) Make sure that smacess log is enabled in SM managemnet console - Data -> Audit Logs -> text file

4) Restart Policy Server

Additional Information:

Snippet of smaccess log

[Category][Event][Reason][Hostname][Time][AgentName][SessionId][UserName][DomainOid][RealmName][RealmOid][ClientIp][Resource][Action][AuthDirName][AuthDirServer][AuthDirNamespace][TransactionId][StatusMsg][DomainName][ImpersonatorName][ImpersonatorDirName][ObjName][ObjOid][FieldDesc]

[========][=====][======][========][====][=========][=========][========][=========][=========][========][========][========][======][===========][=============][================][=============][=========][==========][================][===================][=======][======][=========]

[Auth][Login][][DRSSOIAM2][12/Dec/2016:15:25:30 +1000][][Gvr7c//3W4nGgxiA/GijYv4rgDM=][SiteMinder][][][][][][][][][][][][][][][][][]

[Agent][Create][][DRSSOIAM2][12/Dec/2016:15:30:42 +1000][][][user1][0a-00000000-0000-0000-0000-000000000000][][][][][][][][][][][][][][test agent][01-2f4f3144-22ff-4418-8c10-4e5b6e104451][]

[Auth][AuthReject][][DRSSOIAM2][12/Dec/2016:15:38:07 +1000][transpolar agent][D3D6aKZBJXMfXOtuBKB7Fo/ao4Q=][CN=user1,CN=Users,DC=drssoiam2,DC=test,DC=lab][03-17aab2a6-afe7-4b54-b522-60188e6b5521][test realm][06-180a500f-9e41-43a8-94db-8f2eb08aafe0][127.0.0.1][/testing/test.html][GET][Active Directory User][127.0.0.1:389][AD:][][80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1][Test AD Domain][][][][][]

[Admin][AdminLogin][][DRSSOIAM2][12/Dec/2016:15:39:16 +1000][][CA.XPS::Administrator@1b34ae57-9161-46db-8be3-071ec38239ed@vo3Xf2jyjKUpRNKeQh4nuhLQKrg=][CA.XPS::Administrator@1b34ae57-9161-46db-8be3-071ec38239ed][][][][drssoiam2/127.0.0.1][][][][][][][][][][][][][]

[Domain][Update][][DRSSOIAM2][12/Dec/2016:15:39:33 +1000][][][user1][0a-00000000-0000-0000-0000-000000000000][][][][][][][][][][][][][][Test AD Domain][03-17aab2a6-afe7-4b54-b522-60188e6b5521][]

[Realm][Update][][DRSSOIAM2][12/Dec/2016:15:40:05 +1000][][][user1][03-17aab2a6-afe7-4b54-b522-60188e6b5521][][][][][][][][][][][][][][test realm][06-180a500f-9e41-43a8-94db-8f2eb08aafe0]