Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

User ID only for Linux Login events

We are using latest version of SEM (2019.4), for all our Linux-based (Centos 6/7 or Debian 9/10) hosts with SEM agents we came into surprised why its only taking the user ID on logon event instead of the actual login name. However for log-off events its working normal. Anyone having the same findings?

Find more posts tagged with

Accepted answers

All comments

jhynds

There appears to be a setting you can adjust in auditd.conf that will replace the UIDs with the actual username. SEM will not automatically lookup the passed/group files, we will only parse the information contained within the log data. That setting could be set only for logoff events in your case.

PyoChi-su

Thanks for the advise let me check if this will work in our environment.