Skip to main content

Administrators modification log tracking?

Posted by dbenders on Thu, 08/20/2009

Hi, is there a plan to save in a log what change make each admin?

In MTE we want to track any change made by any one so we can track misconfiguration maded by some admins.

All the systems I know, have some kind of this, for example in linux the bash history.
Maybe a webmin log tracker?


Submitted by eeman on Thu, 08/20/2009 Permalink

I believe something like that is being worked on. I assume that you're doing the due diligence of not letting multiple people login with the same username. Webmin has some abilities for this, but the module has to send data to the logging module.

Submitted by dbenders on Fri, 08/21/2009 Permalink

Hi Erik, we have each admin with their own login and password, but the problem is that there is no track on what they did. For example, if someone change an extension name, we only know that he acceced the extension modification CGI, but there is no track of what was changed.

Do you know what is the time frame for this feature?

Submitted by eeman on Fri, 08/21/2009 Permalink

you mean you want a full diff -u of the file changes on every save? I doubt you'll get anything quite that elaborate, that doesn't scale very well for 10000 users plus admins.

Submitted by dbenders on Mon, 08/24/2009 Permalink

Hi, I agree that if you use diff - u, will not scale very well, but instead I will sugest to save a LOG with at leat this info:

DATE

TIME

LOGIN USER

CGI Excecuted

PARAMETERS ENTERED IN THE SCRIPT

With this info, will be OK in order to track how did what. You don't need to know exactly what characters were modified in an asterisk configuration, but you will want to know, when someone delete an extension by mistake, to know which extension was deleted in order to reverse it. Also to train that user how to do things.