-
Title
What do syslog entries from TPAM look like? -
Description
What do syslog entries from TPAM look like?
-
Resolution
The following is a sample of how the logs are captured (sample of password request logs):
Dec 12 12:26:14 IP Address PAR[2428]: UserName: PARAdmin Operation: Check Password ObjectType: Account Password Target: SystemName/LocalAdmin Role: Admin Failed? 0
Dec 12 12:26:37 IP Address PAR[2844]: UserName: PARAdmin Operation: Revoke ObjectType: Account Permission Target: SystemName/LocalAdmin Role: Admin Failed? 0
Dec 12 12:26:37 IP Address PAR[2920]: UserName: PARAdmin Operation: Grant ObjectType: Account Permission Target: SystemName/LocalAdmin Role: Admin Failed? 0
Dec 12 12:26:53 IP Address PAR[3532]: UserName: PARAdmin Operation: Approved ObjectType: Password Target: SystemName/LocalAdmin Role: NoRole Failed? 0
Dec 12 12:26:53 IP Address PAR[3844]: UserName: PARAdmin Operation: Request Release ObjectType: Password Target: SystemName/LocalAdmin Role: Requestor Failed? 0
Dec 12 12:27:15 IP Address PAR[3432]: UserName: PARAdmin Operation: Retrieve Password ObjectType: Password Target: SystemName/LocalAdmin Role: Requestor Failed? 0
Dec 12 12:27:25 IP Address PAR[4036]: UserName: PARAdmin Operation: Retrieve Password ObjectType: Password Target: SystemName/LocalAdmin Role: Requestor Failed? 0
Dec 12 12:27:33 IP Address PAR[3396]: UserName: PARAdmin Operation: Expired early ObjectType: Password Target: SystemName/LocalAdmin Role: Requestor Failed? 0
For version 2.5.915:5/4/2016 3:09:45 AM [2] From:TPAM-FQDN (TPAM-IPAddress) Fac:1 Sev:6 Msg >>> PAR[69]: AdminName: ParMaster Operation: Update ObjectType: SysLog Configuration ObjectName: ManagedHost-IP OtherInfo: SysLog Server changed to ManagedHost-IP5/4/2016 3:10:01 AM [4] From:TPAM-FQDN (TPAM-IPAddress) Fac:1 Sev:6 Msg >>> PAR[70]: UserName: ParAdmin Operation: Request Release ObjectType: Password Target: ManagedHost-Name/psm Role: Requestor Failed? 0 OtherInfo: Request # 13-187, Reason: REQ5/4/2016 3:10:01 AM [3] From:TPAM-FQDN (TPAM-IPAddress) Fac:1 Sev:6 Msg >>> PAR[70]: UserName: ParAdmin Operation: Approved ObjectType: Password Target: ManagedHost-Name/psm Role: NoRole Failed? 0 OtherInfo: Request # 13-187, Comment: Auto-approved because this account does not require dual-control5/4/2016 3:10:05 AM [5] From:TPAM-FQDN (TPAM-IPAddress) Fac:1 Sev:6 Msg >>> PAR[70]: UserName: ParAdmin Operation: Retrieve Password ObjectType: Password Target: ManagedHost-Name/psm Role: Requestor Failed? 1 OtherInfo: The post release reset for a prior release is still processing.5/4/2016 3:10:11 AM [6] From:TPAM-FQDN (TPAM-IPAddress) Fac:1 Sev:6 Msg >>> PAR[69]: AdminName: ParMaster Operation: Start ObjectType: Auto Management Service ObjectName: N/A OtherInfo:5/4/2016 3:10:26 AM [7] From:TPAM-FQDN (TPAM-IPAddress) Fac:1 Sev:6 Msg >>> PAR[70]: UserName: ParAdmin Operation: Expired early ObjectType: Password Target: ManagedHost-Name/psm Role: Requestor Failed? 0 OtherInfo: Request # 13-187, Comment: End -
Additional Information
The actual time stamps are by syslogd not TPAM.