Session Manager logging

[mattKnight]

We have a requirement which I'm told is non-negotiable (compliance)

We need to be able to centrally log logon/logoff events for session managers (not interested in logging SIP traces...) Normally this would handled by syslog, but with no access to root this cannot be configured. Surely Avaya have come across this kind of requirement before...

It's possible that we could harvest required logs to System Manager - but this a manual process and the last thing I want to do is have to manually do repetitive B*ll*cks tasks like this.

Anyone have any ideas?
Currently running 6.3 at a high SP level.

Take Care

Matt
I have always wished that my computer would be as easy to use as my telephone.
My wish has come true. I no longer know how to use my telephone.

 

[jimbojimbo]

You can probably get this through "System Manager>Events>Logs>Log Settings" however good look with finding it documented. Probably under com.avaya.asm.<something>. Also you may need to upgrade SMGR/SM to 7.1 in order to get remote Syslog working. It may need to be appended them remote syslog of the System Manager logging. There is a "help" for sending System Manager Syslog messages to a remote server but it's not very descriptive and simply points to some files/configuration parameters.

 

[mattKnight]

Cheers JimboJimbo for the pointers!

I'll report back

Take Care

Matt
I have always wished that my computer would be as easy to use as my telephone.
My wish has come true. I no longer know how to use my telephone.

 

[kyle555]

What do you mean by logon logoff events? as in, admins sshing in, or SIP account logon/logoffs?



there's sm console commands in the CLI, so "sm console" and "get allrslocal" prints all registrations including when they registered. That you don't need root for.

Then, /var/log/Avaya/sm? or tracer/asset.log has all the events as something like OP_CURE57001 for logon, 57002 off. If you can't root your SM, then a harvester of that one file would be good enough to parse out.

 

[mattKnight]

What do you mean by logon logoff events?

Admin access via SSH

Take Care

Matt
I have always wished that my computer would be as easy to use as my telephone.
My wish has come true. I no longer know how to use my telephone.