Which log file logs sessions / admin log-ins

Technical assistance
1

Hey everyone,

I was wondering, if there is a log file that logs all admin console logins as the session overview is not helpful at all.
I’m looking for a way to filter for specific admin accounts and when they logged in to the console, not when they’ve logged in the last time.

Can someone point me in the right direction what log file contains that information?

Enjoy your day and thanks in advance!

Best,
Matt

2

Hi @Matthias.Beck. What do you mean with console?

3

Hey @fliebe92 I’m referring to the Sessions / Sitzungen Option in the Admin GUI (Settings / System)

I can see the sessions there, but I’d like to know, if there’s a way to see when the actual login occured.

4

You can see this in the production.log file (usually located in /var/log/zammad/) by searching for the account name you’re interested in.

5

Thanks, I’ll do some research, as I’m either blind or I don’t see any login sessions / tries within the production log.
At least not related to the username. Could not find what I was looking for so far.

6

It might be difficult finding this information in busy instances which produce a lot of logging information, but you should be able to find something based on your login name. Try searching for strings like Authentication against. This is what you should be seeing:

image
image1358×471 135 KB

7

Thanks, got it!
Somehow my search did not find anything authentication related. Just did a live logging via via SSH and tail.

8

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.