En
Es
VMmanager 6 saves information about the operation of services in log files. You can view the log files of each service individually or group them.
Audit service log files contain information about platform security events and configuration changes. For example:
- attempts to log in with email and password;
- password reset attempts;
- attempts to log in via LDAP;
- creation, deletion and editing of platform users;
- changing access rights of platform users.
Each event record contains:
- a unique sequence number;
- event date and time;
- event type;
- information about the success of the action.
If the action is performed by an authorized user, the log displays the user ID.
Audit event logs are protected from deletion and editing. Deleting or modifying logs via API and web interface of the platform is not supported.
Viewing audit event logs
To read logs in JSON format, install the jq utility:
apt install jq || dnf install jqTo view the audit services logs, enter the command:
- auth container (auth_back4 service): Line-by-line output
journalctl -f ACOD=3Output in JSON formatjournalctl -f -o json ACOD=3 | jq - vm_box container (gosockify service), vm_back container: Line-by-line output
journalctl | grep vm_securityOutput in JSON formatjournalctl -f -o json | grep vm_security | jq
Output examples
Useful tips
Related topics: