We need to write a report that shows who logged into the orion web site...when they logged in and what, if any, changes were made. has anyone done anything like this?
any help would be appreciated.....
i don't know of any freeware reporters to do this but in the past i've used something called COMPUTER ASSOCIATES (aka CA) Unicenter Web Traffic Analyzer. it served this purpose well.
it would make these reports from Solarwinds Orion's IIS "LOG" files. but this CA product is now obsolete for us and we've gone to a new product 'Webtrends' which is overkill for a simple report like this. we're only using Webtrends for our web farm reporting and i don't have access to it, so i no longer make these reports for Orion users.
but if you come across something 'freeware' and simple i'd like to know about it myself. if it will use the IIS log file then you're in luck.
I was hoping something within orion could accomplish this....for PCI we need to be able to track changes in our log server which is orion....
I'm not an expert with this but can't the windows server be configured to log this information about IIS logins into the event logs on the server... in the security log? Here's a reference to the types of logon messages:
http://www.windowsecurity.com/articles/Logon-Types.html
Also here's some good IIS LogFiles/Reporting info:
http://www.iisfaq.com/Default.aspx?tabid=2550
Here's a really good resource on enabling IIS logging:
http://support.microsoft.com/kb/q300390/
I would think one of the first things to do is set the server to keep a larger size of log also.
Our company has been moving forward with audits and certifications as well making this type of information very important. It would be really nice if SolarWinds could implement this, at the very least a log of who logged in and when.
