3.2. Audit Reporting
Audit reporting is a new feature in Satellite 5.6 that logs all Satellite users' events and tracks user activity within the Satellite. To use this report, the spacewalk-report needs to be installed.
To audit users:
# spacewalk-report audit-users user_id,audit_stamp,audit_action,audit_user_id,audit_username,organization_id,username,password 1,2013-07-19 07:57:31,INSERT,-1,SETUP,1,admin,$1$PRZpragf$qn0ADgKNUA8RUK6jWPttG1 2,2013-07-19 10:30:42,INSERT,1,admin,1,mike,$1$7PS2LMpf$3za7fb24Ha0rgPeo39jQM/ 2,2013-07-19 10:31:10,DELETE,1,admin,1,mike,$1$7PS2LMpf$3za7fb24Ha0rgPeo39jQM/
To audit servers:
# spacewalk-report audit-servers server_id,audit_stamp,audit_action,audit_user_id,audit_username,organization_id,architecture,os,release,name,description,info,creator_id,creator_login,auto_update,running_kernel,last_boot,provision_state,channels_last_changed,cobbler_id 1000010000,2013-07-19 07:58:09,INSERT,1,admin,1,x86_64-redhat-linux,fedora-release,19,ibm-ls22-04.rhts.eng.brq.redhat.com,"Initial Registration Parameters: OS: fedora-release Release: 19 CPU Arch: x86_64",,1,admin,N,,0,,, 1000010000,2013-07-19 07:58:09,UPDATE,1,admin,1,x86_64-redhat-linux,fedora-release,19,ibm-ls22-04.rhts.eng.brq.redhat.com,"Initial Registration Parameters: OS: fedora-release Release: 19 CPU Arch: x86_64",,1,admin,N,,0,,, 1000010000,2013-07-19 07:58:38,UPDATE,-2,CLIENT,1,x86_64-redhat-linux,fedora-release,19,ibm-ls22-04.rhts.eng.brq.redhat.com,"Initial Registration Parameters: OS: fedora-release Release: 19 CPU Arch: x86_64",,1,admin,N,3.9.9-302.fc19.x86_64,1374229018.255403,,, 1000010000,2013-07-19 08:00:37,UPDATE,1,admin,1,x86_64-redhat-linux,fedora-release,19,ibm-ls22-04.rhts.eng.brq.redhat.com,"Initial Registration Parameters: OS: fedora-release Release: 19 CPU Arch: x86_64",,1,admin,N,3.9.9-302.fc19.x86_64,1374229018,,, 1000010000,2013-07-19 10:36:11,DELETE,1,admin,1,x86_64-redhat-linux,fedora-release,19,ibm-ls22-04.rhts.eng.brq.redhat.com,"Initial Registration Parameters: OS: fedora-release Release: 19 CPU Arch: x86_64",,1,admin,N,3.9.9-302.fc19.x86_64,1374229018,,,
To audit server-groups:
# spacewalk-report audit-server-groups group_id,audit_stamp,audit_action,audit_user_id,audit_username,organization_id,group_name,group_description,max_members,current_members 7,2013-07-22 10:29:23,INSERT,1,admin,1,test-group,test-group,,0 7,2013-07-22 10:30:01,UPDATE,1,admin,1,test-group,test-group,,1 7,2013-07-22 10:30:45,UPDATE,1,admin,1,test-group,test-group,,0 7,2013-07-22 10:30:45,DELETE,1,admin,1,test-group,test-group,,0
Note
Saving the output into a CSV file allows you to view the log results in a human readable format.
For maintenance and database space clean up, archive and delete old entries using the new tool
spacewalk-archive-audits.
