mirror of
https://github.com/ptarmiganlabs/butler-sos.git
synced 2025-12-19 17:58:18 -05:00
48
docs/log4net_user-audit-event/LocalLogConfig.xml
Normal file
48
docs/log4net_user-audit-event/LocalLogConfig.xml
Normal file
@@ -0,0 +1,48 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<configuration>
|
||||
|
||||
<appender name="EventSession" type="log4net.Appender.UdpAppender">
|
||||
<filter type="log4net.Filter.StringMatchFilter">
|
||||
<param name="stringToMatch" value="Start session for user" />
|
||||
</filter>
|
||||
<filter type="log4net.Filter.StringMatchFilter">
|
||||
<param name="stringToMatch" value="Stop session for user" />
|
||||
</filter>
|
||||
<filter type="log4net.Filter.DenyAllFilter" />
|
||||
<param name="remoteAddress" value="<FQDN or IP of server where Butler is running>" />
|
||||
<param name="remotePort" value="9997" />
|
||||
<param name="encoding" value="utf-8" />
|
||||
<layout type="log4net.Layout.PatternLayout">
|
||||
<converter>
|
||||
<param name="name" value="hostname" />
|
||||
<param name="type" value="Qlik.Sense.Logging.log4net.Layout.Pattern.HostNamePatternConverter" />
|
||||
</converter>
|
||||
<param name="conversionpattern" value="/proxy-session/;%hostname;%property{Command};%property{UserDirectory};%property{UserId};%property{Origin};%property{Context};%message" />
|
||||
</layout>
|
||||
</appender>
|
||||
|
||||
<appender name="EventConnection" type="log4net.Appender.UdpAppender">
|
||||
<filter type="log4net.Filter.StringMatchFilter">
|
||||
<param name="stringToMatch" value="connection Opened for session" />
|
||||
</filter>
|
||||
<filter type="log4net.Filter.StringMatchFilter">
|
||||
<param name="stringToMatch" value="connection Closed for session" />
|
||||
</filter>
|
||||
<filter type="log4net.Filter.DenyAllFilter" />
|
||||
<param name="remoteAddress" value="<FQDN or IP of server where Butler is running>" />
|
||||
<param name="remotePort" value="9997" />
|
||||
<param name="encoding" value="utf-8" />
|
||||
<layout type="log4net.Layout.PatternLayout">
|
||||
<converter>
|
||||
<param name="name" value="hostname" />
|
||||
<param name="type" value="Qlik.Sense.Logging.log4net.Layout.Pattern.HostNamePatternConverter" />
|
||||
</converter>
|
||||
<param name="conversionpattern" value="/proxy-connection/;%hostname;%property{Command};%property{UserDirectory};%property{UserId};%property{Origin};%property{Context};%message" />
|
||||
</layout>
|
||||
</appender>
|
||||
|
||||
<logger name="AuditActivity.Proxy">
|
||||
<appender-ref ref="EventSession" />
|
||||
<appender-ref ref="EventConnection" />
|
||||
</logger>
|
||||
</configuration>
|
||||
Reference in New Issue
Block a user