History of Users logons to the Bigfix Console

Reporting
1

Hi,

Require report for history of users login in the bigfix console for audit purpose and not looking resent login user time.

Regards,
Shaban

2

Hello Shahban,

This might be your starting point:

q: lines whose (it contains "log in. (") of files whose (name of it starts with "server_audit") of parent folder of folder (values of settings "_BESRelay_HTTPServer_ServerRootPath" of client)

If you only care about Console logins, you may change your search to: "log in. (Data"

Regards,
Vitaliy

1 Like
3

Thanks Vitaliy,

Can we bit more modify this relevance to fetch monthly report where I can see only how many user users attempt logged in a month, we getting all history by given relevance that’s big report around 25 mb when we getting through web report.

Also Checked below relevance in console which is not working

lines whose (it contains “log in. (Data”) of files whose (name of it starts with “server_audit”) of parent folder of folder (values of settings “_BESRelay_HTTPServer_ServerRootPath” of client)

Regards,
Shaban

4

My relevance worked in Console, your relevance worked too, but beware of all the wrong double quotes in your relevance, which should be changed to a regular: "

Here is an example of output for your relevance:

image
image989Ă—374 27.3 KB

By the way, this might be a way to only show log entries made less than 30 days ago:

q: lines whose ((it contains "log in. (Data") and (now - time(preceding text of first "|" of following text of first "|" of it)) < 30*day) of files whose (name of it starts with "server_audit") of parent folder of folder (values of settings "_BESRelay_HTTPServer_ServerRootPath" of client)

Regards,
Vitaliy

3 Likes
5

Thanks :slight_smile:
Regards,
Shaban

1 Like