Auditing User Logins

RunMyJobs audits user logins by default. To view the user login audit trail, navigate to Auditing > User Logins. User logins are not displayed alongside object change audit logs in the Auditing > Audit Trail overview.

The Active Auditing module logs the username, time, interface, IP address, protocol, and user agent; the latter two are not displayed in the User Logins overview by default. You can add the Protocol and/or User Agent columns from the column chooser.

The Active Auditing module logs only logins to the web interface. Other logins (for example, via a CAR file uploader) are not taken into account.

The UserLoginAuditor audit rule can be edited and/or disabled, but not deleted. You can create your own User Login audit rules. By default, the module audits logins to the web interface from all users. You can specify a specific username, a glob pattern, or regular expression to match usernames to be audited.

Note: The Active Auditing Module requires the Module.Auditinglicense key to be present in your license.

Tabs and Fields

Fields that are not listed in this table have no effect on login auditing.

Tab Field Description
Audit Rule Name Name of the audit rule.
Audit Rule Description Description of the audit rule.
Audit Rule Application The Application the audit rule belongs to.
Audit Rule Rule Object Type|User Login User login audit.
Audit Rule Name Pattern Username pattern to match.
Audit Rule Name Pattern Match Type Pattern matching mode.
Audit Rule Enabled Checkbox for enabling/disabling the audit rule; default is checked (enabled)

Username Matching

You can use the following match rules for usernames.

  • Exact Insensitive: The value must match, case-insensitive. No wildcards allowed.
  • Exact Sensitive: The value must match, case-sensitive. No wildcards allowed.
  • GLOB Insensitive: Glob match, case-insensitive.
  • GLOB Sensitive: Glob match, case-sensitive.
  • RegEx Insensitive: The value must match, case-insensitive. Regular expression pattern.
  • RegEx Sensitive: The value must match, case-sensitive. Regular expression pattern.

Note: Application and Partition matches are ignored in audit rules for user logins.