8.21.919 On Premises Release Notes

Actions to be logged

1. All successful login events and unsuccessful login attempts
2. All logoff events
3. This includes both events that occur when a user manually logs out, and events that occur when an administrator uses the Session Management page in Manuscript to terminate a session, delete a token, or kill all active sessions.
4. The creation, modification, and deletion of user accounts
5. The generation of a new API token during a user’s session
6. All attempts to perform unauthorized activities that result in a 403 error code

Information logged per Action

1. The name of the action
2. The date and time of the action (in the format “MM/DD/YYYY HH:mm:ss”)
3. The name of the user (using the Manuscript field “sFullName”, which should contain both the first and last name of the user who is currently logged in) associated with the action
4. If a user has not entered both a first and a last name, the information that will be logged will be whatever information is contained in the “sFullName” field for this user
5. The outcome of the action
6. The action attempt will be logged as one line, and its success or failure will be logged as a separate line
7. In the case of a partial success of an action, the part of the action that succeeded and the parts of the action that failed will be logged in separate lines
8. The IP address associated with the action
9. The name of the system from which the action originated will also be logged, but only when the Reverse DNS lookup on the IP address succeeds; in the case of a Reverse DNS lookup failure, the name of the system will not be logged.