4 Replies Latest reply on Feb 24, 2009 3:46 PM by superblock

    Admin Console logging?

    superblock

      Title

      Admin Console logging?

      Your post


      FileMaker Product(s) involved: FMS9

      Operating System(s) involved
      : OSX 10.4.x

      While looking into Admin Console access problems. I checked the logs on the server. It appears that FMS9 does NOT log Admin Console access at all. Is that correct? If so, it seems to be a significant security shortcoming.


        • 1. Re: Admin Console logging?
          TSNanner
            

          Hello Superblock,

           

          If you look through your logs you should see an entry similar to the following:

           

          2009-02-20 10:32:01.426 -0500    Information    518    FMSERVER10.private    Administrator connected: "fmsadmin" (169.254.74.115).

           

          This information is logged in the Event.log file in: MacHD > Library > FileMaker Server > Logs

           

          As a test look at the latest entry in the log, then connect to the Admin Console, then look back at the log file and you should see a new entry like the one I posted above.

           

           

          TSNanner

          FileMaker, Inc.

          • 2. Re: Admin Console logging?
            superblock
              

            |This information is logged in the Event.log file in: MacHD > Library > FileMaker Server > Logs

             

            I have a choice under Logs of Access.log, Events.log & Stats.log; and older ones.

             

            I opened Access.log; set a marker, and saw client connections. Then I started the java console, did things like look at the # of clients, killed it [no logout visible] and looked again the access.log. No mention of the console.

             

            Ditto Events.

             

            Events does have multiple password failures logged {Must be a bug in the script that changes between tables..} But it does log something...

             

            (And, why isn't console access logged the same place as clients?)

             

             

             

             

            • 3. Re: Admin Console logging?
              TSNanner
                

              The only log file we record Admin Console connections is in the Event.log file.

               

              Every time a user launches the admin console and connects to FileMaker Server it will put in an entry exactly like in my previous post (with the exception of the computer name, and IP address of the client).

               

              If you open the event.log and type 518 into the console filter, it should show the events where a user connected to the admin console.

              • 4. Re: Admin Console logging?
                superblock
                  

                I moved the whole file to be local and then grepped for  "connected:" to get both connect and disconnect messages.  Such should be in pairs, and some are, but not all... and those that are have me disconnecting before I connect each time. 

                 

                And the dozen plus of the last two days are not there at all.






                2008-03-17 20:35:28.128 -0400    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-03-17 20:37:08.529 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-03-17 20:38:51.937 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-03-20 16:11:00.780 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-03-20 19:50:58.110 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-03-20 20:11:09.702 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-04-09 18:32:48.058 -0400    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-04-09 18:35:07.530 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-05-10 21:10:54.563 -0400    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-05-10 21:12:21.794 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-06-05 04:22:27.239 -0400    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-06-05 04:23:46.191 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-06-06 14:23:26.389 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-06-06 18:37:06.422 -0400    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-06-06 18:40:37.749 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-08-03 16:41:55.691 -0400    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-08-03 16:44:07.615 -0400    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-12-08 19:05:06.098 -0500    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-12-08 19:07:15.173 -0500    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-12-22 20:39:29.617 -0500    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-12-22 20:41:17.399 -0500    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2008-12-24 00:51:47.612 -0500    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2008-12-24 00:54:46.601 -0500    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2009-02-03 23:22:39.095 -0500    Information    520    World Services    Administrator disconnected: "fmsadmin" (192.168.1.44).
                2009-02-03 23:24:23.307 -0500    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).
                2009-02-20 00:16:21.165 -0500    Information    518    World Services    Administrator connected: "fmsadmin" (192.168.1.44).