IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  How to monitor management files modifications

    Posted Fri March 18, 2022 05:51 AM
    Dear Colleagues,

    Is it possible to monitor any changes on management root folders (template files on Webseal or on AAC)?

    An example: when we replace template files, can we see in some LOGs which file was replaced by which user?

    Is there any auditing option here?

    Regards,

    ------------------------------
    Janos Laszlo Horvath
    ------------------------------


  • 2.  RE: How to monitor management files modifications

    Posted Mon March 21, 2022 02:04 AM

    Janos,

     

    In the 10.0.2 release of Verify Access support was added for an access log for LMI requests.  I believe that this should meet your requirements.  You can find out more information on the access log capability of the LMI in the official documentation: https://www.ibm.com/docs/en/sva/10.0.2?topic=settings-configuring-administrator

     

    I hope that this helps.

     

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

     




    Original Message


  • 3.  RE: How to monitor management files modifications

    Posted Wed March 23, 2022 01:56 PM
    Hi Scott,

    What value should we set for LMI access log if we want to use httpaccesslogging with these options- 
    <httpAccessLogging logFormat='%h %u %{t}W "%r" %s %b'/>
    https://openliberty.io/docs/20.0.0.12/access-logging.html?_ga=2.259319754.1560042916.1647715568-426970775.1599602923


    ------------------------------
    Deep Puri
    ------------------------------

    Original Message


  • 4.  RE: How to monitor management files modifications

    Posted Mon October 31, 2022 10:38 AM
    Hello together,

    we also would need this kind of LMI access log. Any example available how to set the value.

    Thanks
    J.Reinhardt

    ------------------------------
    Juergen Reinhardt
    ------------------------------

    Original Message


  • 5.  RE: How to monitor management files modifications

    Posted Mon October 31, 2022 03:49 PM

    Juergen,

     

    Unfortunately, I don't really understand the question.  The LMI access log configuration entry corresponds exactly with the Liberty logging entry.  So, if you want to use the Liberty logging value of  '%h %u %{t}W "%r" %s %b' you need to set this same value in the LMI configuration entry.

     

    The LMI access log configuration entry is an 'administrator' setting (see: https://www.ibm.com/docs/en/sva/10.0.2?topic=settings-configuring-administrator). 

     

    I hope that this helps.

     

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">

     

     

     




    Original Message


Related Content