(imported topic written by zpt8mjs)
Greeting,
In order to integrate IEM with several of our existing processes, I am looking for a way to monitor the status of actions from the client side. I was poking around a bit and found that there is a SQLite file in the client directory “.\__BESData\__Global\ActionHistory.db.” A little more poking around and I was able to find a reference to the db in the executable for the client. So, if you run the following SQL query against the database:
select AH.ActionID, TotalActiveCount, ActiveCount, State, IssuerName, IssuedTime, ChangeTime, ActionName, HadUserInterface, Trivial from ACTION_HISTORY as AH, ACTION_STATE_HISTORY as ASH where AH.ActionID = ASH.ActionID;
it gives you a list of all the actions that were run on the client. An example of the output looks like this:
846384|1|1|846384: :pending=1:id=846384:pt=1413494069:constrained=1:constraint=8:fac=1:ac=1:al=4:ast=1413554758:lal=4:lat=1413554790:lct=1413554792:wfd=0:act=0:s=Waiting:pr=1:pl=0:ec=0:notexpired=True:relevant=True:|nyc2kxc|1413494015|1413554974|2014-10-15 MS Patch Policy MUI - MS14-059: Vulnerability in ASP.NET MVC Could Allow Security Feature Bypass - ASP.NET MVC 2.0 - KB2993939 (All Languages)|0|0
Much of this appears straight forward. However, the most interesting is probably the ‘State’ column. Can someone help me decipher what this all means? There are a lot of abbreviations in there, and I could guess at what they are, but it would be better if I don’t have to guess.
Thanks
zpt8mjs