Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Thu Mar 28, 2024 7:24 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 5 posts ] 
Author Message
 Post subject: System Audit info
PostPosted: Wed Sep 09, 2015 12:39 am 
Offline
Helper

Joined: Wed Aug 08, 2012 1:49 am
Posts: 70
Is possible insert in the field "by" the last logged on user ?
Thanks :D
[attachment=0] Cattura.JPG
Cattura.JPG [ 70.2 KiB | Viewed 8492 times ]


Top
 Profile  
Reply with quote  
 Post subject: Re: System Audit info
PostPosted: Wed Sep 09, 2015 2:36 am 
Offline
Contributor

Joined: Wed Apr 07, 2010 8:04 am
Posts: 105
Location: Boston, MA
I believe this only shows a user when the audit script is manually ran by an user, as oppose to by System or NMAP. I don't think the database has a historical record of last users so what you are asking for will require changing the whole OA product.

One alternative could be to run the audit as a login script. This won't show the last user, but every user that has logged on to the computer. Caviats, some tables will grow exponentially if you have many computers and many users logging in thorough the day.

_________________
Old OA Setup: 500 Windows 7 workstations & 200 Apple OSX with OA v1.5.2 on Windows Server 2003 and WAMP 2
New OA Setup: 100 Windows servers with OA 2.2 on Windows Server 2016 and WAMP 3


Top
 Profile  
Reply with quote  
 Post subject: Re: System Audit info
PostPosted: Wed Sep 09, 2015 4:22 am 
Offline
Helper

Joined: Wed Aug 08, 2012 1:49 am
Posts: 70
the audit run as login script and show pc ip from field submitted from,
It would be enough to enter the user logged in by
...

any suggestions?


Top
 Profile  
Reply with quote  
 Post subject: Re: System Audit info
PostPosted: Thu Sep 10, 2015 1:50 pm 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1259
It looks like this is a ToDo item that is mostly done on the back end but needs the audit portion. So in the audit_windows.vbs audit script you need to get <last_seen_user> into the <sys> section of the XML. Details left as an exercise for the reader.

In my testing adding this causes the upload to fail. Comment out line 73 and 74 in "code_igniter\application\models\m_sys_man_audits.php" by putting "//" at the beginning of the line. You can see on line 64 the TODO note. From the error message $this->user is not set and causes an error when called by line 73.


Top
 Profile  
Reply with quote  
 Post subject: Re: System Audit info
PostPosted: Thu Sep 17, 2015 9:27 am 
Offline
Site Admin
User avatar

Joined: Mon Jun 07, 2004 11:48 am
Posts: 1964
Location: Brisbane, Australia
This field is supposed to be the user that (on the Open-AudIT Server side) submitted the result using Discovery.
You should be able to populate it by following JPA's suggestion.

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 5 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group