Would parsing the gsr_diag* logs on the EM yield something? grep for 'type:' it will show you which client a user logged in as...for example I have the following types:
I've also noticed in the table audit_activities you can select both LOGIN and LOGOUT
The query I used is as follows:
SELECT username, comp_type FROM audit_activities WHERE (operation like 'LOGIN USER' or operation like 'LOGOUT USER')
The comp_type will give you the different types of clients.
1 of 1 people found this helpful
Hi Haw Kor
After evaluating your suggestion, I just want to make a minor correction :
For me on V9, I was able to find the evidence of some user is logging To CCM gui on grep "type: em_ccm" cms_diag.<host> .<pid>.<date>.<seq>.txt file.
with your suggestion, Indeed it is possible to script to get all <IDs> associated with CCM user login registered and track whether the ID is unregistered.
with these commands below :
grep "type: em_ccm" cms_diag.<host>.66366.20191113.#0020.txt
grep -e "was assigned UserID\|and registered user name" cms_diag.<host>.66366.20191113.#0020.txt | grep "$USER_ID"
usersmanager ECSUsersManager::IDLRegisterImpl(thread 3326613248) User A112288 was assigned UserID DD0ECEEA82 and registered user name A112288. Authorization message:
grep -e "User DD0ECEEA82 unregistered successfully." cms_diag.<host>.66366.20191113.#0020.txt
13/11/2019 16:45:42.721  usersmanager ECSUsersManager::Unregister(thread 3325122304) User DD0ECEEA82 unregistered successfully.
Thank You very much for contributing