Skip navigation

To log actions on patch objects in the audit logs

score 85
You have not voted. Product Team Review

We currently do not log when someone:

- Hide patch

- Unhide patch

- Modify a patch job property without detail of what has been modified.

- Modify a patch job property (reboot param…) without detail of what has been modified.

 

Administrators must be able to track who performed these actions in case of it had bad consequences.

 

Edit:
- Improvement request DRZKZ-5036 has been opend

- Part of this is implemented in the mtxagent_audit.log:

A   [22080] admin - 127.0.0.1 - Created object 'My Test Device Group object 'My patch Job' of type 'Patch Job'

A   [18708] admin - 127.0.0.1 - Destroyed object 'My patch Job' of type 'Patch Job'

A   [25064] admin - 127.0.0.1 - Unassigning device 'My Test Device' from patch job 'New Patch Job'

A   [25064] admin - 127.0.0.1 - Assigning device group 'My Test Device Group' to patch job 'New Patch Job'

A   [16516] admin - 127.0.0.1 - Assigning device 'My Test Device' to patch job 'New Patch Job'

A   [16516] admin - 127.0.0.1 - Unassigning device group 'My Test Device Group' from patch job 'New Patch Job'

A   [25064] admin - 192.168.111.1 - Assigning patch 'windows10.0-kb4516068-x64-1703.msu' to patch job 'New Patch Job'

A   [25064] admin - 192.168.111.1 - Unassigning patch 'windows10.0-kb4516068-x64-1703.msu' to patch job 'New Patch Job'

A   [18556] admin - 127.0.0.1 - Created object 'My Test Device Group object 'My New Patch Group' of type 'Patch Group'

A   [4252]  admin - 127.0.0.1 - Destroyed object 'Patch Group 2' of type 'Patch Group'

A   [22920] admin - 192.168.111.1 - Assigning patch 'vs14-kb4506164.exe' to patch group 'Patch group 1'

A   [23952] admin - 192.168.111.1 - Unassigning patch 'vs14-kb4506164.exe' to patch group 'Patch group 1'

A   [20280] admin - 127.0.0.1 - Assigning device 'My Test Device' to patch group 'Patch group 1'

A   [13212] admin - 127.0.0.1 - Unassigning device 'My Test Device' from patch group 'Patch group 1'

A   [22852] admin - 127.0.0.1 - Assigning device group 'My Test Device Group' to patch group 'Patch group 1'

A   [24160] admin - 127.0.0.1 - Unassigning device group 'My Test Device Group' from patch group 'Patch group 1'

Comments

Vote history