Matthew, I believe what LJ is referring to is a feature that was added to the 7.5 release that allows you to "log to form".
What this allows you to do is to turn on user logging and direct that it go to a form. You could then set up filters that will look at every user login/logout/failed password/timeout/... event and take action. This action could be to have a table that has a record for every user and you update a counter on every login/logout or note times of login and on logout you calculate duration. You could tell whether the user timed out or did a formal logout. The key is that this is the same as your log analysis option, but it would be automated and calculate the data into a form that users could report on or use or do whatever you want with the data without you having to do the analysis. Note: doing this, you want an escalation or use archiving (with the delete option) to keep removing old records from this form -- unless you want to keep the entire log of course. I hope this helps clarify the suggestion, Doug Mueller ________________________________ From: Action Request System discussion list(ARSList) [mailto:[email protected]] On Behalf Of Matthew Perrault Sent: Friday, July 30, 2010 8:38 AM To: [email protected] Subject: Re: Capturing when an Admin Login is used ** Thanks guys. Ya I tried adding some code to the AR System:License Review form, but that's a Vendor form, and it didn't work :(. I look into the INIT form, though, but I really needed to capture when the Admin tool is logged into. I'm thinking if there was a table in the DB, I could write a DB trigger on that to insert into a different table, Then drop a view form on that table As far as upgrade to 7.5 (it'll solve all your problems! MMMMOOOOOOOOO-plop plop-->Bull....) That's not going to happen any time soon. I heard the same thing on upgrading to 7.1...needless to say, I was less than impressed. "Fool me once, shame on you. Fool me twice, shame on me." From: Action Request System discussion list(ARSList) [mailto:[email protected]] On Behalf Of LJ LongWing Sent: Friday, July 30, 2010 9:58 AM To: [email protected] Subject: Re: Capturing when an Admin Login is used ** Matthew, As John mentioned, you could use the Init form, but that only works in the user tool...not Admin or Web...your best option in my opinion is to upgrade to 7.5 and turn on the user license monitoring feature...then write a filter on these forms to do what you need....outside of upgrading, I believe your only other option is the user log. ** Matthew, Look for the INIT_Form in the docs. You have to add it to the ar.cfg file. I loads in the back ground and you can use it to push data to your "Spy on the bad admin" form;^> Can ya tell it's Friday? --- John J. Reiser Senior Software Development Analyst Remedy Administrator/Developer Lockheed Martin - MS2 The star that burns twice as bright burns half as long. Pay close attention and be illuminated by its brilliance. - paraphrased by me From: Action Request System discussion list(ARSList) [mailto:[email protected]] On Behalf Of Matthew Perrault Sent: Friday, July 30, 2010 8:11 AM To: [email protected] Subject: Capturing when an Admin Login is used ** All, I'm trying to capture when a specific Administrator Login is used to login to the User or Admin Tool. I need to take that information, and save the ID and the Timestamp into a Form/Table so that it can be reported off of monthly. While I could turn on the User Logging (from the Server Information form), and run a Perl Script to convert it into a CSV, that means I would have to be doing the reporting (which I want to avoid). It also means that Log could get pretty big. Does anybody have any suggestions/ideas on how I can do this with Remedy Work Flow? I thought there was a way, but I can't remember. ARS 7.1 Patch 8 ITSM 7.1 MS SQL Database 2005 Windows Server 2003 Thanks in advance Matt P. _attend WWRUG10 www.wwrug.com ARSlist: "Where the Answers Are"_ _attend WWRUG10 www.wwrug.com ARSlist: "Where the Answers Are"_ _attend WWRUG10 www.wwrug.com ARSlist: "Where the Answers Are"_ _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug10 www.wwrug.com ARSlist: "Where the Answers Are"
