topic Re: Replicate Log Files on Linux in Qlik Replicate

Replicate Log Files on Linux

allann — Wed, 22 Feb 2023 19:24:06 GMT

We need to submit log paths for Replicate activity such as authentication/logon checks, user permission changes, system events, account management, and other server activity. We have our instance installed on Linux. I see that there are repsrv and repcmd log files. What's the main difference between the two?

Re: Replicate Log Files on Linux

Nanda_Ravindra — Wed, 22 Feb 2023 19:38:23 GMT

@allann repcmd log file is generated for every repctl command that is run and the repsrv log is the server log that shows all the activities.

Thanks,

Nanda

Re: Replicate Log Files on Linux

allann — Wed, 22 Feb 2023 19:44:37 GMT

Thanks for the quick response. Does the repsrv log show all administrator activity?

Re: Replicate Log Files on Linux

Steve_Nguyen — Wed, 22 Feb 2023 19:52:11 GMT

@allann , the repsrv log have activity , such as task stop , start, error, not sure what administrator activity are you looking for.

Re: Replicate Log Files on Linux

allann — Wed, 22 Feb 2023 19:56:17 GMT

logon authentication, admin changes settings, changes to accounts includes done by admin or user themselves, object access, failed logons.

Re: Replicate Log Files on Linux

shashi_holla — Wed, 22 Feb 2023 19:56:51 GMT

Hi @allann

To check more on the authentication/user logon errors, the log file we should be checking is repuictl which will have authentication details.

system events, account management, and other server activity

repsrv log will have these details.

Thank you,

Re: Replicate Log Files on Linux

Steve_Nguyen — Wed, 22 Feb 2023 20:01:29 GMT

@allann , look like you are looking for auditing, this is more of Qlik Enterprise manager, QEM , see user guide :

https://help.qlik.com/en-US/enterprise-manager/November2022/Content/EnterpriseManager/Main/Servers/create_audit_trail.htm

Re: Replicate Log Files on Linux

allann — Wed, 22 Feb 2023 20:06:39 GMT

Yes, for Splunk requirements. This makes more sense. Thanks!

Re: Replicate Log Files on Linux

Nanda_Ravindra — Wed, 22 Feb 2023 22:45:37 GMT

Adding to Steve's comments, if you are looking for auditing then Qlik enterprise is the one you should use. Please note that, in order to track the activities, all the transactions must be executed in Enterprise Manager to show up in the audit trail report in QEM.

Hope this helps!

Thanks,

Nanda

Re: Replicate Log Files on Linux

allann — Thu, 23 Feb 2023 13:10:25 GMT

Thanks Nanda. Is there a way to automate the auditing logs? From what I've found it's only manual on the UI.

Re: Replicate Log Files on Linux

SwathiPulagam — Thu, 23 Feb 2023 17:26:49 GMT

Hi @allann ,

You can use the below QEM Rest API call to export the Audit Trail.

https://help.qlik.com/en-US/enterprise-manager/May2022/Content/EnterpriseManager/EnterpriseManager_APIGuide/CurlAPI/api_exportAuditTrail.htm

Thanks,

Swathi