User Auditing (Post 26.1.X)
This page describes how to enable User Auditing in dbWatch Control Center for versions 26.1.X and newer, using Legacy Audting. If you have the newer Audit Module, see here
dbWatch Control Center includes support for User audit logging of all actions performed by a user logged in to a dbWatch Monitor.
Enabling User Auditing (Manual Configuration)
Currently, auditing must be configured manually by editing the “server_configuration.xml” file on the Control Center Server.
Step-by-Step Instructions
1. Stop the dbWatch Server service before making any changes
2. Navigate to the location of the configuration file (typically: “C:/ProgramData/dbWatchControlCenter/config/server/server_configuration.xml” or “/var/dbwatch-controlcenter/config/server/server_configuration.xml”)
3. Make a full backup of the file before editing
4. There should be an XML block called “audit-settings” that looks similar to this::
<audit-settings>
<audit-setting>
<user-audit-type>1,3,5</user-audit-type>
<audit-catalog><![CDATA[C:\local-debug-data\server_new_1\log\audit_oldschool]]></audit-catalog>
<file-switch-interval-minutes>360</file-switch-interval-minutes>
<user-audit-catalog><![CDATA[C:\local-debug-data\server_new_1\log\audit_oldschool]]></user-audit-catalog>
<audit-level>2</audit-level>
<file-keep-for-days>-1</file-keep-for-days>
</audit-setting>
</audit-settings>The relavant tags are:
| Tag | Description |
|---|---|
| <user-audit-type> | The type of action to audit as a comma-separated list. See the audit type table below. |
| <user-audit-catalog> | The directory to save the audit log files to. |
| <audit-catalog> | This is used for auditing of user actions, don’t change it. |
| <file-switch-interval-minutes> | This is used for auditing of user actions, don’t change it. |
| <file-keep-for-days> | This is used for auditing of user actions, don’t change it. |
| <audit-level> | This is used for auditing of user actions, don’t change it. |
The available audit types are:
| Audit type | Description |
|---|---|
| 1 | User reads information from the dbWatch Server |
| 2 | User sets configuration values on the dbWatch Server |
| 3 | User reads information from a database instance |
| 4 | User sets data on a database instance |
| 5 | User login/logout information |
5. Save the file and restart the dbWatch Server.