Open-AudIT

Right now, when I change e.g the hostname from a server the following line will be written to the Audit Log:



Is it possible to also add the old value to the log?

E.g:



I already found the code in /code_igniter/application/models/m_audit_log.php in the function insert_audit_event($field_name, $field_value, $system_id) but I am not sure how to add the old value.

_________________
Server Info:
OS : Ubuntu 14.04
Auditing: ~ 500 machines (35 Windows Server, 440 Linux Server)
LDAP: not yet
Version: Open-AudIT Version 1.8.4

This is not easy. You would need to find all the locations where insert_audit_event is called in the code and modify those to include the old data information. There are not very many but where they are called the "old" data is not readily available (except one instance.) So you would need to have additional code to find the old value to pass to insert_audit_event. It's not that difficult but you'll need to contract Opmantek or make an enhancement request and wait.

And insert_audit_event should be changed to include an old_data parameter which could be empty.