Auditing and Logging contents.gifprev1.gifnext1.gif

Auditing and Logging

Advanced monitoring allows an Administrator full details of all WinGate activity. User properties dialogs have a Auditing tab. Services properties have a logging tab. All per-user monitoring is stored in the audit files, and per-service monitoring in the log files. These files are in a ‘Tab delimited’ format. A text editor or the Logfile Server is used to view these files.

User audits are stored by default as

%WinGatePath%\audit\username.log

Service logs are stored as

%WinGatePath%\logs\servicename.log.

The file format is:

Date
Time
IP
Session #
Event Type
Event Details
12/02/96
15:01:25
192.168.0.1
0000006100
Modify
user John
12/02/96
15:04:35
192.168.0.1
0000007126
Created http://



There are two divisions of Audit/log events. Several options are available. Administrators may select any or all of these. The default options are indicated.

Session Events:

Event type
Default setting
Description
Creation
Off
Selecting this option causes session creation details to be logged. The detail indicates the service type, eg HTTP. Session creation details are often used when tracking down problems.
Termination
Off
Selecting this option causes termination of sessions to be logged. This is not normally selected unless there are problems with your applications hanging. An individual session can be tracked from creation and request to termination.
Request Details
On
Session request detail will be stored. In HTTP, the requested URL will be recorded.
Debug
Off
Logs any debug messages that occur.
License violations
Off
Any violation of the license count will be recorded.
Traffic
On
Traffic levels recorded for the session. In Bytes (sent to, received from, sent for, received for) client, seconds.

e.g.

12/02/96 15:04:36 192.168.0.1 07126 Traffic 103 334 310 103 1s

Configuration Events:

Event type
Default setting
Description
Authorization Failure
On
If a user enters the wrong password, the event will be noted
Errors
On
Records details of any errors
Service start/stop
On
Notes when the service is started or stopped.
Configuration changes
On
Note service/user configuration changes.
User Login
On
Indicates when the user logs in
User Logout
On
Notes when a user logs out.

e.g.

12/02/96 15:28:11 192.168.0.1 0000007291 Logged in