IBM Support

Multiple entries of login and logoff operations are shown in audit logs when a single user login PMC

Troubleshooting


Problem

Multiple entries of login and logoff operations are shown in audit logs when a single user login PMC

Resolving The Problem

You are seeing multiple logon/logoff entries shown in the audit logs for a single user logon PMC, entries like the following:

2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logon DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logon DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logon DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logoff DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logoff DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logoff DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY r USER logon DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logon DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logon DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logoff DETAIL: [IP] is
2011-01-21 12:18:49.000 GMT Standard Time SECURITY USER logoff DETAIL: [IP] is

The audit log logon and logoff message is a reflection of the implementation of the security checking for Symphony at the backend. This does not reflect the actual number of user logon interaction from our PMC user interface.

The user might have logged into PMC, and PMC has various portals and components calling EGO which need credential checking. Each call will generate a logon and logoff operation at the backend. The call will log a message if audit log is enabled. You can test by running our CLI "egosh" command and each egosh call will generate a logon/logoff pair for the egosh command itself.

[{"Product":{"code":"SSZUMP","label":"IBM Spectrum Symphony"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}},{"Product":{"code":"SSZUMP","label":"IBM Spectrum Symphony"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":null,"Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
23 June 2018

UID

isg3T1016219

Page Feedback