Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 12:49 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 2 posts ] 
Author Message
PostPosted: Tue Jan 05, 2016 7:43 pm 
Offline
Newbie
User avatar

Joined: Wed Nov 12, 2014 6:57 pm
Posts: 14
Location: Frankfurt a.M., Germany
Right now, when I change e.g the hostname from a server the following line will be written to the Audit Log:

[code]Administrator 2016-01-05 10:41:12 System Manual Data Changed hostname - new_hostname [/code]

Is it possible to also add the old value to the log?

E.g:

[code]Administrator 2016-01-05 10:41:12 System Manual Data Changed hostname - changed from hostname to new_hostname[/code]

I already found the code in /code_igniter/application/models/m_audit_log.php in the function insert_audit_event($field_name, $field_value, $system_id) but I am not sure how to add the old value.

_________________
Server Info:
OS : Ubuntu 14.04
Auditing: ~ 500 machines (35 Windows Server, 440 Linux Server)
LDAP: not yet
Version: Open-AudIT Version 1.8.4


Top
 Profile  
Reply with quote  
PostPosted: Wed Jan 06, 2016 5:01 am 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1259
This is not easy. You would need to find all the locations where insert_audit_event is called in the code and modify those to include the old data information. There are not very many but where they are called the "old" data is not readily available (except one instance.) So you would need to have additional code to find the old value to pass to insert_audit_event. It's not that difficult but you'll need to contract Opmantek or make an enhancement request and wait.

And insert_audit_event should be changed to include an old_data parameter which could be empty.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 2 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group