nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Tracking Logins

System

Does anyone know who to configure TS to log all user logins? We need to track who logs-in for security purposes. Does not seem to be a part of the trace or events log or any of the iwui logs.

In the past we have run a cron job using output from iwrecentusers. Is that still the only way?

I would like to avoid customization and/or LDAP integrations, etc ... just a plain vanilla TS on windows or linux.

Thanks

Find more posts tagged with

Comments

Migrateduser

Please supply your Operating system and TeamSite version.

Migrateduser

6.5 and older
iwhome/iw-webd/logs/access.log

6.7 and later
You can find that info in iwhome/local/logs/iwui/access.log

In the log you will find entries for ""POST /iw-cc/command/iw.ui HTTP/1.1" 200" with the username on the end. I believe these are successful logins. You can use these logs in any web log analyzer. Or input them into SQL and create your own report.

Migrateduser

So, only the POST with USER IDSs represent logins?

There are a log of GET /iw-cc/command/iw.ui type entires - with and without user ids. and POST's without user ids.

Too bad that nothing tracks user logons specifically, just the "normal" access log entries from apache. It seems like sometime during the last 10 years of so we could have at least added a TRACE of EVENT level entry specific to logins.

Thanks.

Migrateduser

Correct, use the POST.

If you want an out of the box solution then put in a FR (feature request). It will be at least a year before you get anything.

This page will help explain why they don't keep track of currently logged in users.

https://customers.autonomy.com/support/secure/docs/FAQ/Interwoven/61312.html

Adam Stoller

Based on a quick scan of the log file (on a 672SP2P1 W2K3 system) - the following code might provide you with what you're looking for:

#!d:/interwoven/teamsite/iw-perl/bin/iwperl
use strict;
use warnings;
use TeamSite::Config;

(my $iwhome = TeamSite::Config::iwgethome()) =~ tr|\\|/|;
my $logfile = "$iwhome/local/logs/iwui/access.log";
open(IN, '<', $logfile) || die " $logfile ($!)";
while(<IN>) {
    next if /\"GET/;
    chomp;
    if ($_ =~ m|^.*\[(.*?)\].*/iw-cc/command/iw\.ui\s+.*\d+\s(.*)$|) {
        print "$1 - $2\n";
    }
}
close(IN);

But that's just a guess. You might be able to cross-correlate the output from the above with the output from iwrecentusers to get a sense of who's still logged in or something - but it's probably still a bit vague and/or inaccurate.

Migrateduser

Thanks Adam, We will probably try a nightly iwrecentusers batch job (did that for siemens a while back and it worked okay for load). If they want a "real time" log, I will probably take your suggestion and workout some sort of merge approach.