Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 6:34 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 
Author Message
 Post subject: Logging to server
PostPosted: Tue Aug 19, 2008 6:49 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Would it be worth adding the ability to log progress of the script back to the web server (perhaps limit the age of this information so we dont fill up the database). That way we dont have to look on the remote machine for the log if things didn't go the way they should have. Doesn't have to be too flashy, just a form to send the data to, and a log page to view it.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Logging to server
PostPosted: Wed Aug 20, 2008 12:19 am 
Offline
Contributor

Joined: Fri Jul 28, 2006 6:30 am
Posts: 157
Location: London
Andrew,

I'm already using a rudimentary event log as part of the AD auditing code I'm working on. I'm hoping to have the AD stuff ready for testing by the end of the week, so you could take a look at the event logging that I've used then.

Cheers, Nick.

_________________
Cheers, Nick.

[size=85]OA Server: Windows Server 2003 / Apache 2
Auditing: 1600 Workstations, 200 Servers
OS's: Windows XP / Windows 2000 / Windows 2003 Server / Windows Vista
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Logging to server
PostPosted: Wed Aug 20, 2008 5:44 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Sounds good, I'm off on Friday, so probably Monday before I have a chance to view your new code.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Logging to server
PostPosted: Wed Aug 20, 2008 11:30 pm 
Offline
Helper

Joined: Tue Jul 25, 2006 2:33 am
Posts: 83
Location: Hampshire, UK
Perhaps I'm missing something here - in fact I most probably am! - but if there is an audit failure won't we have to go back to the failed machine to identify the problem? Will a central audit log help us any with that?

Thanks,
John

_________________
OA environment:
OA Server: Ubuntu 10.04LTS
1 Windows 2008R2 Server
4 Windows 2003 Servers
20 Windows XP workstations
1 Windows 7 workstation
2 Ubuntu 11.10 servers
Misc other networked items


Top
 Profile  
Reply with quote  
 Post subject: Re: Logging to server
PostPosted: Thu Aug 21, 2008 3:06 am 
Offline
Contributor

Joined: Fri Jul 28, 2006 6:30 am
Posts: 157
Location: London
[quote="JayDee"]Perhaps I'm missing something here - in fact I most probably am! - but if there is an audit failure won't we have to go back to the failed machine to identify the problem? Will a central audit log help us any with that?

Thanks,
John


Depends on what's causing the failure. Audit.vbs is very complex and, IMO, not designed to handle errors well. But that doesn't mean that it couldn't be changed to do so. Some errors are trivial and shouldn't, with proper design, cause the audit script to fail completely (better to return an audit with missing data than none at all). These types of errors could be reported back to the server.

As an example I had a case of a system that was running an newer version of audit.vbs against an older database. As such the SQL queries were failing (due to table design changes). With the right coding the SQL failure could be detected and reported.

Cheers, Nick.

_________________
Cheers, Nick.

[size=85]OA Server: Windows Server 2003 / Apache 2
Auditing: 1600 Workstations, 200 Servers
OS's: Windows XP / Windows 2000 / Windows 2003 Server / Windows Vista
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Logging to server
PostPosted: Thu Aug 21, 2008 4:16 am 
Offline
Helper

Joined: Tue Jul 25, 2006 2:33 am
Posts: 83
Location: Hampshire, UK
Nick,
Thanks for replying. Yes, I can see that a more robust audit.vbs (in OA2 perhaps?) could go further towards both self-recovery and providing more helpful information. Guess I wasn't looking towards the horizon!
John

_________________
OA environment:
OA Server: Ubuntu 10.04LTS
1 Windows 2008R2 Server
4 Windows 2003 Servers
20 Windows XP workstations
1 Windows 7 workstation
2 Ubuntu 11.10 servers
Misc other networked items


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group