KB Article #102267

How to turn on-off IME Account Audit

How to turn on-off IME Account Audit
This article was previously published as ID#29635


Summary:
To monitor IME Account activity on the server, there is an option to turn on Audit feature. This feature logs account login, modification and delete activity on the server. On Windows install, this activity is logged in Event Viewer - Application Logs. On Solaris machine, it is present in server.log file.

Symptom:
IME System Admins need to monitor and audit system usage. This utility will allow them to achieve this.

Resolution:
Windows Install:
* Shutdown IME Server.
* Go to Start - Run. Type in regedit to go to System Registry.
* Proceed to HKEY_LOCAL_MACHINE -> Software -> Tumbleweed -> Server -> Network section
* Edit key value "Audit" (Add if not present) as "1" (String Value).
* Edit key value "Audit Facility" (Add if not present) as "0" (String Value).
* Start IME Server.
* Login into any IME Account.
* Go to Event Viewer and look for IMEServer log event in Application logs indicating login with account name and time.

Solaris:
* Shutdown IME Server.
* Go to /config directory as root.
* Open server.ini file and go to [Network] section
* Add or modify following settings:
[Network]
"Audit"="1"
"Audit Facility"="0"
* Save the file and exit.
* Start IME.
* Login into any IME Account.
* Go to /logs/server.log file and look for login audit at the bottom of the file.

Please note that these settings are case-sensitive.


Original Author: DKALT
Original Submitter: DKALT
Keywords: IME, Audit, Audit Facility, login, delete, account IME ID#29635