05-21-2014 02:47 AM - edited 03-19-2019 08:12 AM
Hey Guys,
Can I get a log which says "when a user logged in and logged out" of Jabber for Windows ?
Thanks
Varadarajan.R
05-21-2014 09:19 PM
Hi Varadarajan,
You can capture the CUPS Audit logs. The login information will be shown as below ( example )
08:29:12.131 |Message Received LogMessage UserID : abcd ClientAddress
: 192.168.11.2 Severity : 6 EventType : UserLogging ResourceAccessed:
CUPCPA EventStatus : Success CompulsoryEvent : No AuditCategory :
AdministrativeEvent ComponentID : Cisco UP Client Profile Agent
AuditDetails : User login was successful. App ID: Cisco Tomcat Cluster ID:
Node ID: CUPS222.
HTH
Manish
05-22-2014 08:45 AM
Manish, I have an old version of CUPS (8.6.4). My log looks like this. Is this the same thing?
17:19:14.041 |LogMessage UserID : cpetty@dgs.dgsystems.com/jabber_29783 ClientAddress : 10.0.12.64 Severity : 5 EventType : UserSessionCreation ResourceAccessed: JSM EventStatus : Success AuditDetails : User Session Created ComponentID : XCP Router CompulsoryEvent : No AuditCategory : UserEvent App ID: Cisco UP XCP Router Cluster ID: StandAloneClustera61ef Node ID: irvcups1
I also notice some of these events say "UserID : cpetty@dgs.dgsystems.com/composed ClientAddress : unknown". What are those? They don't seem to be normal Jabber logins.
Thanks,
Craig
05-22-2014 08:03 PM
Hi Craig,
Based on the following
EventType : UserSessionCreation ResourceAccessed: JSM EventStatus : Success AuditDetails : User Session Created ComponentID : XCP Router
If Application Auditing is enabled on Cisco Unified Presence, an audit log is written when a user's JSM Session is created. This can occur when a user logs in a client to Cisco Unified Presence.
I am not too sure about your second question though, will look into it if i get later if i get some time.
HTH
Manish
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: