the job run should show what user and role are running it...
Thanks for the reply. Yes, the job does show a username, but it is a service account and does not point to an actual user or system that is kicking off the job:
Info Jul 7, 2016 8:44:27 PM INFO: roleName = BLAdmins
Info Jul 7, 2016 8:44:27 PM INFO: userName = BLAdmin
Our BladeLogic system seems to be inundated with rogue enrollment jobs (running on average of 12 times a day) and right now we have no way to contact the submitter and have them stop the jobs, because we cannot identify who they are. It seems to be an automated routine where the originator is not reviewing results, or has no idea the job is running repeatedly. If we would somehow get an originator IP at job submission, we could trace it back.
Well one way to fix this would be to change the password of the account ☺
So in the log4j.properties of whatever instance (eg install/NSH/br/deployments/theinstancename) the requests goto you should see:
Uncomment that line and change it to DEBUG. After a min or so it should start logging the webservices info on debug. That should have the info you want. when you are done change it back to INFO so the logging reverts back (commenting the line will not change it back)
Thanks Bill, I'll give it a shot!