Trying to find out which one of my BigFix Operators are deleting machines from the Console, no one’s fessing up. Is there a way I can find out who’s deleting machines? Any help would be appreciated!
Thanks.
Not sure if this is placed into the audit log of the server?
1 Like
It doesn’t seem to be an auditable event at the moment.
One possibility if it’s still happening, would be to temporarily enable verbose logging on the server and look up for lines containing both “Main Thread” and “/data/computers/”. Those lines would be written every time the server receives a request from the console to remove a particular computer ID that is specified in the URL, like /data/computers/123456. The log line also writes the IP address where the request came from to the server, so that may help identify what console it is
1 Like