Is there a way to get to know the operator deleting BES actions?

1

Please help me with a way to enable or enhance audit logs which can give me the information of an operator who is deleting the BES actions? Thank you!!

2

If you’re running 9.5.11 or higher, this information is maintained in the server_audit.log (https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Installation/r_logfiles.html).

3 Likes
3

Thank you, I could see the API connection information in server_audit logs but it does not shares if someone deleted any actions. Am i missing something to be checked?

4

Do a search for the following string: |ACTION|DELETE|

1 Like