Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
Changed: | ||||||||
< < | APPX Audit Log | |||||||
> > | APPX Audit Log | |||||||
Changed: | ||||||||
< < | APPX now includes the ability to log all file I/O for selected data files. | |||||||
> > | APPX now includes the ability to log all file I/O for selected data files. | |||||||
Overviewuappxd/appxdsvc have been modified to start as a LogMonitor. For uappxd you can create a log monitor service like this: | ||||||||
Changed: | ||||||||
< < | ||||||||
> > | ||||||||
./uappxd -install -serviceType=logmonitor -name=myLogMonitor -port=8064 | ||||||||
Line: 20 to 20 | ||||||||
Once you have created this new Service Type, it will create .ini and .env files for you. In our example, uappxd will create myLogMonitor.ini and myLogMonitor.env fiels in /tools directory. Make sure you change permissions on newly created .ini and .env files: | ||||||||
Changed: | ||||||||
< < | ||||||||
> > | ||||||||
chmod 775 myLogMonitor | ||||||||
Line: 29 to 29 | ||||||||
You can change the name of the log file (which defaults to /tmp/appxlog%N.xml) by setting the LogNamePattern in the myLogMonitor.ini file. You can also change the LogRotationInterval and LogRotationSize. Since we rotate audit logs, you specify a LogNamePattern instead of just a filename. The pattern can include %N (which is translated to a monotonically increasing counter: 0, 1, 2, ..) or any of the date/time format specs. supported by the strftime() function (see 'man strftime' for a list of the patterns). For example, a LogNamePattern of '/tmp/appx_%F.xml' would generate names like: | ||||||||
Changed: | ||||||||
< < | ||||||||
> > | ||||||||
/tmp/appx_2007-01-31.xml /tmp/appx_2007-02-28.xml The default pattern (as reflected in the serviceName. ini file) is: | ||||||||
Changed: | ||||||||
< < | LogNamePattern = /tmp/appxlog%N.xml | |||||||
> > | LogNamePattern = /tmp/appxlog%N.xml | |||||||
Each time the log monitor rotates to a new log file, it replaces %N with the next number in sequence (it was always starting at 0). You can use other specifiers in the LogNamePattern too, for example, "/tmp/appx-%D-%B-%Y" would result in file names like: | ||||||||
Changed: | ||||||||
< < | | |||||||
> > | | |||||||
/tmp/appx-12-Jun-08 | ||||||||
Line: 94 to 94 | ||||||||
After you have modified .ini file, you need to stop and re-start that service. To stop service, assuming you are in /usr/local/appx/tools directory AND logged in as appx, simply type: | ||||||||
Changed: | ||||||||
< < | ||||||||
> > | ||||||||
./uappxd -stop -name=myLogMonitor ./uappxd -start -name=myLogMonitor If you stop/start service as a root, make sure you give it a fully qualified path. | ||||||||
Changed: | ||||||||
< < | ||||||||
> > | ||||||||
./uappxd -stop -name=/usr/local/appx/tools/myLogMonitor | ||||||||
Line: 115 to 115 | ||||||||
To define FMS group, go to System Administration, Configuration, Log Profile press F9 to add a new profile. You can name it anything you want. For server name you must give it your server name:port number that you created earlier with uappxd: | ||||||||
Changed: | ||||||||
< < | <?XML:NAMESPACE PREFIX = V /> Then click on Log File Parameters and make sure you check parameters that you wish to log: Now you are ready to define a new FMS group for the monitor. To add a new FMS group you need to go to System Administration, Configuration, File System Groups and press F9 to add a new one for the monitor. Give it an FMS group of 1, then in the FMS group attributes screen pull down Log Profile Names adn choose the name of your Log Profile. You can now assign this FMS group to the file(s) that you wish to monitor. To close existent log file and rotate the log, you need issue the following command:
where PID is a process ID of the audit log listener. Existent log will be closed and rotated tot he next one. Generated xml log files can be viewed with a browser, with XML Notepad, or you can download SQL Express (free) and write queries against your XML file.
BUGS#2195 - FIXED - System Administration - Configuration - Log Profiles. There is a button at the bottom of the screen that is carried over to the details screen. it looks like it's just a left over and needs to be removed #2220 - OPEN - If you run a process - any process, against the file where FMS group for the listener is assigned to, Appx closes session all together - needs better handling. #2225 - OPEN - As of 6/13/08 - you can not use IP address in Log Profile. If server name is used - all is well. If IP address is used - nothing is logged
NOTES:If log file is not closed/rotated properly, Internet Explorer will display your .xml file, but it will show an error at the end of the file saying "File not closed". Firefox, however, will throw an error and won't display file at all In Linux, the way to close log and rotate it is to issue kill -s SIGUSR1 PID command. How to close and rotate the log in Windows? Comments:Read what other users have said about this page or add your own comments. -- SteveFrizzell - 20 Jun 2008 |