Twitter: raymondcamden


Address: Lafayette, LA, USA

ColdFusion 10 - Admin Audit Log

02-27-2012 4,860 views ColdFusion 11 Comments

Here's a little gem I just discovered this weekend. ColdFusion 10 now has an administrator audit log. As you can probably guess, this is a log of administrator actions. You can find it the usual log location (and via the CF Admin Logs page). Here's a sample:

view plain print about
1"Severity","ThreadID","Date","Time","Application","Message"
2"Information","catalina-exec-2","02/15/12","15:25:05",,"C:\ColdFusion10\cfusion\logs\audit.log initialized"
3"Information","catalina-exec-2","02/15/12","15:25:05",,"User admin enabled using admin password "
4"Information","catalina-exec-2","02/15/12","15:25:05","CFADMIN","User admin changed RDS password "
5"Information","ajp-bio-8012-exec-2","02/15/12","15:39:36","CFADMIN","User admin changed Server monitor settings. The old values were Monitoring enabled: YES, Memory tracking enabled: NO, Profiling enabled: NO, Monitoring server Enabled: NO, Monitoring server port: 5500. New values are Monitoring enabled: true, Memory tracking enabled: true, Profiling enabled: false, Monitoring server Enabled: YES, Monitoring server port: 5500"
6"Information","ajp-bio-8012-exec-2","02/23/12","14:41:19","CFADMIN","User admin added/edited new Active ColdFusion Mappings with logical path as /zeustests and Directory path as C:/Users/Raymond/Dropbox/websites/zeustests/"
7"Information","ajp-bio-8012-exec-2","02/27/12","09:27:59",,"User admin deleted datasource mxna."
8"Information","ajp-bio-8012-exec-2","02/27/12","09:28:34","CFADMIN","User admin changed Logging settings.Old values were -->
Log directory : C:\ColdFusion10\cfusion\logs, Maximum file size: 5000, Maximum number of archives: 10, Log slow pages taking longer than: 30.New values are --> Log directory : C:\ColdFusion10\cfusion\logs, Maximum file size : 5000Maximum number of archives: 10, Log slow pages taking longer than: 30 "

Note that this doesn't cover every little action, but rather focuses on the more important changes. Note though that when possible - changes are recorded so that you can see both what the old value was and the new value. This could be invaluable for knowing who to blame when someone screws up.

11 Comments

  • Terry Sampson #
    Commented on 02-27-2012 at 9:41 AM
    Oh no! Now I'm in trouble. :>)
  • JF #
    Commented on 02-27-2012 at 10:07 AM
    Great feature! Our mail setting "magically" changed recently, would have been nice to have ;)
  • Commented on 02-27-2012 at 10:48 AM
    Adding IP address into the log would be a good extension. :)
  • Terry Sampson #
    Commented on 02-27-2012 at 10:49 AM
    Yes, I can see that. Good way to track
  • Commented on 02-27-2012 at 10:57 AM
    Oguz (sigh - noticed your name is broken, sorry man) - file an ER for that. That is a damn good suggestion.
  • Commented on 02-27-2012 at 11:05 AM
    Filed: 3124415

    I am sorry for my name. :)
  • Commented on 02-27-2012 at 11:17 AM
    This is why America is the best country in the world - none of our letters have funky crap on em! ;)
  • Commented on 02-27-2012 at 12:00 PM
    English is Just Another Language :)
  • Commented on 02-27-2012 at 12:51 PM
    This is a great addition, I can remember many times when something like this would have been useful.

    Does it log changes made with the Administrator API?
  • Commented on 02-27-2012 at 1:03 PM
    Hmm, not sure on that one. Give it a try and let us know. :)
  • Sharon #
    Commented on 03-09-2012 at 12:49 PM
    Just noticed this one. I likey. But ask me again when it shows me as the culprit. :-X

Post Reply

Please refrain from posting large blocks of code as a comment. Use Pastebin or Gists instead. Text wrapped in asterisks (*) will be bold and text wrapped in underscores (_) will be italicized.

Leave this field empty