I've looked through the logs for Navigator for i and don't see a way to find out which users are accessing it. Does anyone know of a way to get that or to enable logging of user access? I'm looking for this for both the new and old Navigator for i.

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>
------------------------------

Hello Jeffrey,

Are you asking this for the New Navigator for i of for the Heritage Navigator for i?

I suggest you open an IBM case for this. They will for sure be able to answer this question.


Greetings Rudi

------------------------------
Rudi Van Helvoirt
------------------------------

Hi Rudi, ideally for both old and new Navigator.

I'll go through IBM Support if no one has an answer here....... I like this forum because other people may have the same question and can find the answer here.

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>
------------------------------

Original Message:
Sent: Thu January 13, 2022 04:39 AM
From: Rudi Van Helvoirt
Subject: Find users accessing Navigator for i

Hello Jeffrey,

Are you asking this for the New Navigator for i of for the Heritage Navigator for i?

I suggest you open an IBM case for this. They will for sure be able to answer this question.


Greetings Rudi

------------------------------
Rudi Van Helvoirt
------------------------------

Hello

I do not remember if there is such an access log or not.   But is it the case that your customer wants only a few admins to access it?   If so, I see that it should be easier to use Application Administration function to allow access to only a few admin user profiles. You can control access to all functions or each particular function and this apply to both the old IBM i Navigator and Navigator for i web tool.    This is a good starting point for you :  5 Ways to Control Access using Application Administration5 Ways to Control Access using Application Administration

For more information, Google on "ibm i application administration".

Hope this help.

Satid S.
IBM ASEAN Lab Services.

------------------------------
SATID SINGKORAPOOM
------------------------------

Hi Satid, thanks for the link, eventually I will want to implement some controls over access to certain functions. For now I am the only one that will need to see who is accessing the Navigator.

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>
------------------------------

Original Message:
Sent: Thu January 13, 2022 05:16 AM
From: SATID SINGKORAPOOM
Subject: Find users accessing Navigator for i

Hello

I do not remember if there is such an access log or not.   But is it the case that your customer wants only a few admins to access it?   If so, I see that it should be easier to use Application Administration function to allow access to only a few admin user profiles. You can control access to all functions or each particular function and this apply to both the old IBM i Navigator and Navigator for i web tool.    This is a good starting point for you :  5 Ways to Control Access using Application Administration5 Ways to Control Access using Application Administration

For more information, Google on "ibm i application administration".

Hope this help.

Satid S.
IBM ASEAN Lab Services.

------------------------------
SATID SINGKORAPOOM
------------------------------

I tried this out on a test system using the new IBM i Navigator.
This was from just the initial logon.

SELECT Message_Timestamp,From_User,From_Job,Message_Id,MESSAGE_TEXT
FROM TABLE(Qsys2.History_Log_Info(
Start_Time => current_timestamp - 1 hour,
End_Time => current_timestamp
)) i
WHERE Message_Id in ('CPIAD09','CPI3E34')
AND
MESSAGE_TEXT LIKE '%127.0.0.1%';

returned 7 connections

for the Heritage Navigator 2 connections were returned

------------------------------
Bryan Dietz
------------------------------

(Wrong idea here, edited, ignore this message!)

------------------------------
Jack Woehr
IBM Champion 2021
------------------------------

Wrong again, ignore ;)

------------------------------
Jack Woehr
IBM Champion 2021
------------------------------

Ah, wait, I see ... it's gotta be 127.0.0.1 ... and I had missed the current_timestamp -1 hour clause.
Changed the length of time searched in the log and that worked, thanks, Brian

------------------------------
Jack Woehr
IBM Champion 2021
------------------------------

Original Message:
Sent: Thu January 13, 2022 09:35 AM
From: Jack Woehr
Subject: Find users accessing Navigator for i

Hmm, I played around with the IP address in the LIKE clause and got results, but I'm not convinced what I got was Nav accesses.

------------------------------
Jack Woehr
IBM Champion 2021
------------------------------


Original Message:
Sent: Thu January 13, 2022 09:23 AM
From: Jack Woehr
Subject: Find users accessing Navigator for i

Brian, I tried this on systems where I have been using Nav and it returned 0 results. 7.3 and 7.4.

------------------------------
Jack Woehr
IBM Champion 2021


Original Message:
Sent: Thu January 13, 2022 08:26 AM
From: Bryan Dietz
Subject: Find users accessing Navigator for i

I tried this out on a test system using the new IBM i Navigator.
This was from just the initial logon.

SELECT Message_Timestamp,From_User,From_Job,Message_Id,MESSAGE_TEXT
FROM TABLE(Qsys2.History_Log_Info(
Start_Time => current_timestamp - 1 hour,
End_Time => current_timestamp
)) i
WHERE Message_Id in ('CPIAD09','CPI3E34')
AND
MESSAGE_TEXT LIKE '%127.0.0.1%';

returned 7 connections

for the Heritage Navigator 2 connections were returned

------------------------------
Bryan Dietz

Thanks Brian, that gives me some info. I'm looking for more specifics like which Navigator version is being accessed so I'll run this by IBM and post any results in this discussion.

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>
------------------------------

Original Message:
Sent: Thu January 13, 2022 08:26 AM
From: Bryan Dietz
Subject: Find users accessing Navigator for i

I tried this out on a test system using the new IBM i Navigator.
This was from just the initial logon.

SELECT Message_Timestamp,From_User,From_Job,Message_Id,MESSAGE_TEXT
FROM TABLE(Qsys2.History_Log_Info(
Start_Time => current_timestamp - 1 hour,
End_Time => current_timestamp
)) i
WHERE Message_Id in ('CPIAD09','CPI3E34')
AND
MESSAGE_TEXT LIKE '%127.0.0.1%';

returned 7 connections

for the Heritage Navigator 2 connections were returned

------------------------------
Bryan Dietz
------------------------------

I am looking at other options, maybe something like auditing one of the files or directories.
anything else would probably have to be "added into" the product.

------------------------------
-----
Bryan Dietz
------------------------------

Original Message:
Sent: Thu January 13, 2022 10:56 AM
From: Jeffery Green
Subject: Find users accessing Navigator for i

Thanks Brian, that gives me some info. I'm looking for more specifics like which Navigator version is being accessed so I'll run this by IBM and post any results in this discussion.

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>
------------------------------


Original Message:
Sent: Thu January 13, 2022 08:26 AM
From: Bryan Dietz
Subject: Find users accessing Navigator for i

I tried this out on a test system using the new IBM i Navigator.
This was from just the initial logon.

SELECT Message_Timestamp,From_User,From_Job,Message_Id,MESSAGE_TEXT
FROM TABLE(Qsys2.History_Log_Info(
Start_Time => current_timestamp - 1 hour,
End_Time => current_timestamp
)) i
WHERE Message_Id in ('CPIAD09','CPI3E34')
AND
MESSAGE_TEXT LIKE '%127.0.0.1%';

returned 7 connections

for the Heritage Navigator 2 connections were returned

------------------------------
Bryan Dietz

After discussion with IBM I sorry to say it appears this information isn't trapped in the system. Basically there were 2 options suggested:
1) You can run an SQL to see current connections to the Navigator ports like this: SELECT * FROM QSYS2.NETSTAT_INFO WHERE LOCAL_PORT = 2002 or LOCAL_PORT = 2004. Unfortunately this only shows current connections so no history is available.
2) They suggested I could open an RFE as was discussed here. I may do this, it doesn't help today and has no guarantee it will be implemented.

I also thought of the exit points and will look at creating something that could log access, not sure if it's really an option though.

If anyone has other ideas please post your thoughts!

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>
------------------------------

Better IBM invests in training their support personal.

At least for new and current Navigator i version you can increase the GUI Log Level to FINEST and you will end up with information for each login in the console.log. See attached screenshots. 

For the heritage Navigator for i there is also settings for Console Logging and Tracing. There you can specify the Level for each Package. With this you will probably end up with the same information in the logs...

Kind Regards

Markus

------------------------------
Markus Neuhold
------------------------------

Original Message:
Sent: Thu January 13, 2022 04:56 PM
From: Jeffery Green
Subject: Find users accessing Navigator for i

After discussion with IBM I sorry to say it appears this information isn't trapped in the system. Basically there were 2 options suggested:
1) You can run an SQL to see current connections to the Navigator ports like this: SELECT * FROM QSYS2.NETSTAT_INFO WHERE LOCAL_PORT = 2002 or LOCAL_PORT = 2004. Unfortunately this only shows current connections so no history is available.
2) They suggested I could open an RFE as was discussed here. I may do this, it doesn't help today and has no guarantee it will be implemented.

I also thought of the exit points and will look at creating something that could log access, not sure if it's really an option though.

If anyone has other ideas please post your thoughts!

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>
------------------------------

Markus, this is excellent, exactly what I was looking for. Thank you!

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>
------------------------------

Original Message:
Sent: Fri January 14, 2022 04:55 AM
From: Markus Neuhold
Subject: Find users accessing Navigator for i

Better IBM invests in training their support personal.

At least for new and current Navigator i version you can increase the GUI Log Level to FINEST and you will end up with information for each login in the console.log. See attached screenshots. 

For the heritage Navigator for i there is also settings for Console Logging and Tracing. There you can specify the Level for each Package. With this you will probably end up with the same information in the logs...

Kind Regards

Markus

------------------------------
Markus Neuhold
------------------------------


Original Message:
Sent: Thu January 13, 2022 04:56 PM
From: Jeffery Green
Subject: Find users accessing Navigator for i

After discussion with IBM I sorry to say it appears this information isn't trapped in the system. Basically there were 2 options suggested:
1) You can run an SQL to see current connections to the Navigator ports like this: SELECT * FROM QSYS2.NETSTAT_INFO WHERE LOCAL_PORT = 2002 or LOCAL_PORT = 2004. Unfortunately this only shows current connections so no history is available.
2) They suggested I could open an RFE as was discussed here. I may do this, it doesn't help today and has no guarantee it will be implemented.

I also thought of the exit points and will look at creating something that could log access, not sure if it's really an option though.

If anyone has other ideas please post your thoughts!

------------------------------
<><><><><><><><><><>
Jeffery Green
Sr. Systems Engineer
IBM Power / IBM i
<><><><><><><><><><>