Is there a way to get to know the operator deleting BES actions?

Please help me with a way to enable or enhance audit logs which can give me the information of an operator who is deleting the BES actions? Thank you!!

If you’re running 9.5.11 or higher, this information is maintained in the server_audit.log (https://help.hcltechsw.com/bigfix/10.0/platform/Platform/Installation/r_logfiles.html).

3 Likes

Thank you, I could see the API connection information in server_audit logs but it does not shares if someone deleted any actions. Am i missing something to be checked?

Do a search for the following string: |ACTION|DELETE|

1 Like