SCAA logs
Hi,
In ../conf/jazz/log4j.properties there are lines that look like this:
# Uncomment these lines to create a versioned content access log file
# WARNING : These files will grow fairly fast, if you wish to process this accurately, you
# will could use a FileAppender and pipe it into another script/program.
log4j.appender.scm_scaa=org.apache.log4j.RollingFileAppender
log4j.appender.scm_scaa.layout=org.apache.log4j.PatternLayout
log4j.appender.scm_scaa.layout.ConversionPattern=%m %n
log4j.appender.scm_scaa.File=scaa_content.log
log4j.appender.scm_scaa.MaxBackupIndex=10
log4j.appender.scm_scaa.MaxFileSize=7000KB
log4j.logger.scm_scaa=TRACE, scm_scaa
From my experience SCAA == Source Code Access Audit (or similar) and
we gather logs for CMVC daily and ship to folks that analyze them for
"anomalies"
Looking at the data emitted in the scaa_content.log it's rather terse:
SCAA:ramerk@us.ibm.com/FileItem,ApplicationDesignerTasksHelper.java,_hDO-Aae7Ed6obuyUzhJJYQ,_yzpElKe7Ed6ypfYUM_Hh4Q/Core,_frhkMKe7Ed6ypfYUM_Hh4Q
The access log for the above looks like:
W.X.Y.Z - ramerk@us.ibm.com "GET /jazz/resource/virtualPath/com.ibm.team.scm.rest.dto.VersionableDTO/~EAM7_2009.09.22/resources/tasks/maximo/application_designer/ApplicationDesignerTasksHelper.java?workspace=itemOid%2Fcom.ibm.team.scm.Workspace%2F_Y58q4JZxEd6ypfYUM_Hh4Q&component=itemOid%2Fcom.ibm.team.scm.Component%2F_frhkMKe7Ed6ypfYUM_Hh4Q HTTP/1.1" 200 4462
The above messages don't appear if the scm_scaa log isn't enabled.
I've searched the forums and docs for anything about scaa but found nothing. Any plans to document this aspect ?
In ../conf/jazz/log4j.properties there are lines that look like this:
# Uncomment these lines to create a versioned content access log file
# WARNING : These files will grow fairly fast, if you wish to process this accurately, you
# will could use a FileAppender and pipe it into another script/program.
log4j.appender.scm_scaa=org.apache.log4j.RollingFileAppender
log4j.appender.scm_scaa.layout=org.apache.log4j.PatternLayout
log4j.appender.scm_scaa.layout.ConversionPattern=%m %n
log4j.appender.scm_scaa.File=scaa_content.log
log4j.appender.scm_scaa.MaxBackupIndex=10
log4j.appender.scm_scaa.MaxFileSize=7000KB
log4j.logger.scm_scaa=TRACE, scm_scaa
From my experience SCAA == Source Code Access Audit (or similar) and
we gather logs for CMVC daily and ship to folks that analyze them for
"anomalies"
Looking at the data emitted in the scaa_content.log it's rather terse:
SCAA:ramerk@us.ibm.com/FileItem,ApplicationDesignerTasksHelper.java,_hDO-Aae7Ed6obuyUzhJJYQ,_yzpElKe7Ed6ypfYUM_Hh4Q/Core,_frhkMKe7Ed6ypfYUM_Hh4Q
The access log for the above looks like:
W.X.Y.Z - ramerk@us.ibm.com "GET /jazz/resource/virtualPath/com.ibm.team.scm.rest.dto.VersionableDTO/~EAM7_2009.09.22/resources/tasks/maximo/application_designer/ApplicationDesignerTasksHelper.java?workspace=itemOid%2Fcom.ibm.team.scm.Workspace%2F_Y58q4JZxEd6ypfYUM_Hh4Q&component=itemOid%2Fcom.ibm.team.scm.Component%2F_frhkMKe7Ed6ypfYUM_Hh4Q HTTP/1.1" 200 4462
The above messages don't appear if the scm_scaa log isn't enabled.
I've searched the forums and docs for anything about scaa but found nothing. Any plans to document this aspect ?
3 answers
ramerk@us.ibm-dot-com.no-spam.invalid (yzwkzfn) wrote in news:hcpec6$f1a$1
@localhost.localdomain:
Hey
http://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/63105
--
Christophe Elek
Jazz L3
IBM Software Group - Rational
@localhost.localdomain:
I've searched the forums and docs for anything about scaa but found
nothing. Any plans to document this aspect ?
Hey
http://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/63105
--
Christophe Elek
Jazz L3
IBM Software Group - Rational
ramerk@us.ibm-dot-com.no-spam.invalid (yzwkzfn) wrote in news:hcpec6$f1a$1
@localhost.localdomain:
Perfect !
Many thanks.
I've searched the forums and docs for anything about scaa but found
nothing. Any plans to document this aspect ?
Hey
http://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/63105
--
Christophe Elek
Jazz L3
IBM Software Group - Rational
In Work Item 63105 it states the following:
# Uncomment these lines to create a versioned content access log file
# WARNING : These files will grow fairly fast, if you wish to process this accurately, you
# will could use a FileAppender and pipe it into another script/program.
#log4j.appender.scm_scaa=org.apache.log4j.RollingFileAppender
#log4j.appender.scm_scaa.layout=org.apache.log4j.PatternLayout
#log4j.appender.scm_scaa.layout.ConversionPattern=%m %n
#log4j.appender.scm_scaa.File=scaa_content.log
#log4j.appender.scm_scaa.MaxBackupIndex=10
#log4j.appender.scm_scaa.MaxFileSize=7000KB
# WARNING : These files will grow fairly fast, if you wish to process this accurately, you
# will could use a FileAppender and pipe it into another script/program.
#log4j.appender.scm_scaa=org.apache.log4j.RollingFileAppender
#log4j.appender.scm_scaa.layout=org.apache.log4j.PatternLayout
#log4j.appender.scm_scaa.layout.ConversionPattern=%m %n
#log4j.appender.scm_scaa.File=scaa_content.log
#log4j.appender.scm_scaa.MaxBackupIndex=10
#log4j.appender.scm_scaa.MaxFileSize=7000KB
#log4j.logger.scm_scaa=TRACE, scm_scaa
The log format is as follows:
SCAA:{1}/{2},{3},{4},{5}/{6},{7}
where
1 is the user id
2 is the versionable item type (likely FileItem)
3 is the versionable name (not full path, just the last segment)
4 is the versionable item id
5 is the versionable state id
6 is the component name
7 is the component item id
SCAA:{1}/{2},{3},{4},{5}/{6},{7}
where
1 is the user id
2 is the versionable item type (likely FileItem)
3 is the versionable name (not full path, just the last segment)
4 is the versionable item id
5 is the versionable state id
6 is the component name
7 is the component item id