Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Network Performance Monitor (NPM) > Trace the user login activity in Orion Web Console using Audit Trails

Trace the user login activity in Orion Web Console using Audit Trails

Table of contents

Updated January 10, 2017

Overview

Determine the user login and logout activity using the AuditingEvents Table in Database Manager.

Environment

NPM 12

Steps

SELECT TOP 1000 * FROM [dbo].[AuditingEvents]
where actiontypeid = 1 or actiontypeid = 2 and accountid = 'admin'
order by timeloggedutc desc
  1. Log in to the Orion Web Console using an account with administrator privileges.
  2. Go to Settings > All Settings.
  3. Click Web Console Settings.
  4. Verify if Audit Trails is set to Enabled.
  5. RDP to the NPM Server.
  6. Launch the Database Manager.
    Note: Before you proceed with the Database Changes, verify that you have a backup of your Orion Database.
  7. Locate and double click  the AuditingActionsTypes Table. Refer to the following image:
  8. Note the ActionTypeID (1 and 2 for the user login and user logout respectively).
  9. For example, we would like to trace the login activity of the 'Admin' account. Execute on the following query :  
  10. All activity of that particular user should be displayed as shown in the screenshot, latest first.

 

 

 

Last modified

Tags

Classifications

Public