Activity log

note

You must have the admin role assigned to view the following Settings pages in the UI:

• LDAP Authentication
• Access Control
• Activity Log

Monitor user activity in Data Migrator including user actions performed in the UI, the Data Migrator API and the Hive Migrator API by reviewing Activity Logs.

Each log contains records of user-driven interactions including their time, user, role and the action performed.

Select a record to view more information. Search and filter on strings contained within data object arguments of each record by entering a string in the Search field.

View Activity Logs

1. Select the Activity Logs icon from the top of your UI.

2. From the menu, select from: User Interface, Data Migrator or Hive migrator to view activity for each component.

tip

Sort the activity logs by Timestamp, Username, Role and Action by selecting the column header.

User Interface Activity Log

The User Interface activity log contains user-driven interactions including time, user, role and the action performed from within the UI. Select a record to view more information.

Activity log records

Data Migrator creates two audit records for each operation. For example, you see two records for each user sign-in:

1. The first record shows that the sign-in method has been entered and shows the user assigned at that point. The user is anonymous because nobody is signed in yet.
2. The second record shows that the sign-in method has returned.
   1. If sign-in was successful, it shows the user assigned at that point, which is the registered username.
   2. If sign-in was unsuccessful, it shows the anonymous user.

Default logging configuration

UI activity records can be found (by default) in the following location:

Directory name	Rotation period	Retention period
/var/log/wandisco/audit/ui	Daily	90 days

• No activity log is created for days that have no UI activity.
• You can't change the rotation period.

Data Migrator Activity Log

Select your Data Migrator instance from the dropdown to view user-driven events recorded on the Data Migrator API. Select a record to view more information.

Default logging configuration

Data Migrator activity records can be found (by default) in the following location:

Directory name	Rotation period	Retention period
/var/log/wandisco/audit/livedata-migrator	Daily	90 days

info

Data Migrator audit events presented by the UI are stored in the internal database for 365 days by default. Include the audit.event.purge-after-days property in your Data Migrator configuration to adjust the default.

See Change Data Migrator audit log location to adjust the Data Migrator default audit log location.

Hive Migrator Activity Log

Select your Hive Migrator instance from the dropdown to view user-driven events recorded on the Data Migrator API. Select a record to view more information.

Default logging configuration

Hive Migrator activity records can be found (by default) in the following location:

Directory name	Rotation period	Retention period
/var/log/wandisco/audit/hivemigrator	Daily	90 days

See Change Hive Migrator audit log location to adjust the Hive Migrator default audit log location.

Record types

There are three types of records in the activity log:

1. METHOD_ENTERED The user-driven action that was recorded.
2. METHOD_RETURNED The user-driven change as a result of the action.
3. METHOD_EXCEPTION Any exception/error that occurred as a result of the action.

Record contents

For each entry, the following is recorded:

• The timestamp of the action.
• Who performed the action.
• What type of record it is.
• The action data depending on the type of entry:
  • METHOD_ENTERED The data used to take the action.
  • METHOD_RETURNED The result of the action.
  • METHOD_EXCEPTION The contents of the exception thrown.

Record information examples

METHOD_ENTERED

Example of a user sign-in request

2021-04-28 14:22:49,377 [livedata-ui-async-task-4525] AuditEvent [timestamp=2021-04-28T14:22:49.376Z, principal=anonymousUser, type=METHOD_ENTERED, data={args=[LoginVM{username='user@localhost.com', rememberMe=null}], operation=Logged In}]

METHOD_RETURNED

Example result of user sign-in request

2021-04-28 14:22:49,529 [livedata-ui-async-task-4505] AuditEvent [timestamp=2021-04-28T14:22:49.529Z, principal=user@localhost.com, type=METHOD_RETURNED, data={operation=Logged In, methodResultData=<200 OK OK,com.wandisco.oneui.web.rest.UserJWTController$JWTToken@60c2fe20,[Authorization:"Bearer eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJ1c2VyQGxvY2FsaG9zdC5jb20iLCJhdXRoIjoiUk9MRV9BRE1JTiIsImV4cCI6MTYxOTc5MjU2OX0.3HvgOb82_UpEk_Yy-nWrvEXyU71pubM5EZKR_MgskViAJdflASzsLH5rqr2fmHgGLTMiMWIxRabJWKYt7Hz9aQ"]>}]

METHOD_EXCEPTION

Example of a failed user sign-in request

2021-04-29 16:16:46,656 [livedata-ui-async-task-5360] AuditEvent [timestamp=2021-04-29T16:16:46.655Z, principal=anonymousUser, type=METHOD_EXCEPTION, data={exception=/fusion{401, EMAIL_OR_PASSWORD_INCORRECT, i18nParams={}}, operation=Logged In}]

Redaction policy

By default, all sensitive information (such as passwords and filesystem access keys) are redacted in the entries.