15. Auditing
Auditing for administrative functions is enabled on these components:
- VidyoPortal (.csv format)
- VidyoManager (plain text format in a .tar.gz file)
- VidyoRouter (plain text format in a .tar.gz file)
- VidyoGateway (plain text format in a .tar.gz file)
The sections below describe how to download the Audit logs for each component.
For information about using a separate syslog server, see Enable Syslog.
Download audit logs from your VidyoPortal
|
Note VidyoPortal audit logs can be generated using the System Console. |
For more information, see Audit logs.
Download audit logs from your VidyoRouter
To download the audit logs from your VidyoRouter:
- Log in to your VidyoRouter Configuration Pages using your System Console account.
- Click the Download Logs subtab.
- Select corresponding checkboxes for the logs you want to download.
- Click the Download Audit Logs button to download the file.
|
Note The URL of your VidyoRouter is typically a domain name: http://[IP or FQDN address]/vr2conf. You can also click the VidyoRouter IP address on the Components tab in your VidyoPortal. See Log in to the System Console of your server and change the default password. Although the default username for this page is admin, only the Super Admin accesses these pages. |
The Settings tab and Maintenance left menu item displays by default.
|
Note The Download Audit Logs button downloads the single application logs file for auditing purposes, whereas the Download button is used to download specific user activity log files. |
Download audit logs from your VidyoGateway
To download audit logs from your VidyoGateway:
- Log in to your VidyoGateway using your System Console account.
- Navigate to Maintenance > Diagnostics.
- Click the Download Audit Logs button to download the file.
|
Note The URL of your VidyoGateway is typically a domain name: http://[vidyogateway.example.com]/ You can also click the VidyoGateway IP address on the Components tab in your VidyoPortal. See Log in to the System Console of your server and change the default password. |
The browser downloads the .tar.gz file.
|
Note The Download Audit Logs button downloads the single application logs file for auditing purposes, whereas the Download button is used to download specific user activity log files. |
Audit log content
The following content is captured in the audit log.
Content captured in the audit log:
| Super | |
| Login | |
| Login Successful | Logoff |
| Login Unsuccessful | |
| Components | |
| Component Updated | Router pools activated |
| Component Enabled | Gateway added |
| Component Deleted | Gateway modified |
| Component Disabled | Gateway deleted |
| Tenants | |
| Add tenant | Delete tenant |
| Modify tenant | |
| Router pools | |
| Add / delete pool | Discard modified configuration |
| Add / delete priority list | Create location |
| Add / delete rule | Delete location |
| Activate cloud configuration | Add / delete pool connection |
| Create modified configuration | |
| Settings (super) | |
| System license updated | System restart |
| Software updated | Ports apply |
| Database backup | Generate CSR |
| Database upload | Upload CSR |
| Database download | Clear CSR |
| Super | |
| System upgrade | Certifications uploaded |
| Admin | |
| Login | |
| Login successful | Logoff |
| Login unsuccessful | |
| Users | |
| Add user | Modify user |
| Delete user | Add legacy |
| Meeting rooms | |
| Add meeting room | Delete meeting room |
| Modify meeting room | |
| Groups | |
| Add groups | Delete groups |
| Modify groups | |
| Settings (admin) | |
| Upload software | LDAP save |
| Authentication | |
| VidyoManager | |
| Login | |
| Login successful | Logoff |
| Login unsuccessful | |
| Basic | |
| Apply configuration server | |
| Restart | |
| Restart | Shutdown |
| VidyoRouter | |
| Login | |
| Login successful | Logoff |
| Login unsuccessful | |
| Basic | |
| Apply configuration server | |
| Security | |
| Ports apply | Upload CSR |
| Generate CSR | Clear CSR |
| Upload | |
| Upload and upgrade | Shutdown |
| Restart | |
| VidyoGateway | |
| Login | |
| Login successful | Logoff |
| Login unsuccessful | |
| Configuration | |
| Save | Save and apply |
| Services | |
| Add service | Modify service |
| Delete service | |
| Upgrade Gateway | |
| Upload and install | |
| Certificate | |
| Upload | |
| Restart | |
| Restart | Shutdown |
Sample audit log content
This is how an Audit log for the VidyoRouter, VidyoGateway, and VidyoManager in .txt format looks as viewed in a text editor after being decompressed. From left to right the data logged includes Timestamp, User ID, IP Address, and Description.
The following illustration shows how a VidyoPortal Audit log in .csv format looks as viewed in a spreadsheet program. From left to right the data logged includes: Action ID, User ID, Tenant Name, Action, Action Result, Timestamp, IP Address, and Action Description.
The following are lines taken from actual Syslog content.
