Log file for users changes

[simonet]

Hi,
there are some log file where Zimbra record the action taken to an account like:
- creation
- reset password
- deletion

In audit.log don't find anything

[bdial]

probably mailbox.log

[simonet]

Originally Posted by bdial

probably mailbox.log

in INFO mode no.
in debug mode i don't know but i can't use it because we need continuous monitoring and the log files can become very large

thx

[bdial]

it is in there, just not with enough info probably. just did some tests

2010-10-29 07:51:53,038 INFO  [btpool0-13://iccarus.test.com:7071/service/admin/soap/CreateAccountRequest] [name=admin@test.com;mid=2;ip=192.168.93.2;ua=ZimbraWebClient - SAF3 (Linux);] soap - CreateAccountRequest

2010-10-29 07:56:19,649 INFO  [btpool0-0://iccarus.test.com:7071/service/admin/soap/SetPasswordRequest] [name=admin@test.com;mid=2;ip=192.168.93.2;ua=ZimbraWebClient - SAF3 (Linux);] misc - delegated access: doc=SetPassword, authenticated account=admin@test.com, target account=testadd@test.com

2010-10-29 07:55:06,904 INFO  [btpool0-0://iccarus.test.com:7071/service/admin/soap/DeleteAccountRequest] [name=admin@test.com;mid=2;ip=192.168.93.2;ua=ZimbraWebClient - SAF3 (Linux);] misc - delegated access: doc=DeleteAccount, authenticated account=admin@test.com, target account=testadd@test.com

[simonet]

Originally Posted by bdial

it is in there, just not with enough info probably. just did some tests

2010-10-29 07:51:53,038 INFO  [btpool0-13://iccarus.test.com:7071/service/admin/soap/CreateAccountRequest] [name=admin@test.com;mid=2;ip=192.168.93.2;ua=ZimbraWebClient - SAF3 (Linux);] soap - CreateAccountRequest

2010-10-29 07:56:19,649 INFO  [btpool0-0://iccarus.test.com:7071/service/admin/soap/SetPasswordRequest] [name=admin@test.com;mid=2;ip=192.168.93.2;ua=ZimbraWebClient - SAF3 (Linux);] misc - delegated access: doc=SetPassword, authenticated account=admin@test.com, target account=testadd@test.com

2010-10-29 07:55:06,904 INFO  [btpool0-0://iccarus.test.com:7071/service/admin/soap/DeleteAccountRequest] [name=admin@test.com;mid=2;ip=192.168.93.2;ua=ZimbraWebClient - SAF3 (Linux);] misc - delegated access: doc=DeleteAccount, authenticated account=admin@test.com, target account=testadd@test.com

You think these records are written even if the actions are executed from the command line with zmprov?

It may be that such information is logged in 6.0.8 and not in 6.0.6?

thx