Forum Discussion
Log user activity
- Sep 13, 2016
By default most of this should be logged already, session established messages, usernames, tunnel start, tunnel end.
Look at the syslog output or the file /var/log/apm while you connect a test user and see if the information you're after is there. Each log message will have a session ID used for correlation.
By default most of this should be logged already, session established messages, usernames, tunnel start, tunnel end.
Look at the syslog output or the file /var/log/apm while you connect a test user and see if the information you're after is there. Each log message will have a session ID used for correlation.
Thanks. I assume that the if I am sending logging to a SIEM, that it should be able to parse out session length for users.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com