AEM Forms JEE user audit logs enable

[srujan1981]

Hi Friends,

Please help me out how to enable user audit logs in AEM Forms JEE (JBOSS) server. 

Though I had configured audit log entry in domain.xml file, audit.logs are not generated.

"

<audit-logging>
<file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
</audit-logging>

"

Thanks,

Srujan

[Rahul_P]

Hello @srujan1981 

Are you using domain.xml to start the Jboss in cluster mode?

Ideally it should be "domain_DBname.xml" file under configuration folder where all the DB details were added.

You need to edit that file in order to enable the audit logs for Jboss.

Please make the required changes and let us know if the audit logs are still not printing.

Thanks,

Rahul Pandey

[srujan1981]

Hi Rahul,

I know the file location but what have to make the changes in .xml file to enable the audit logs. If you have sample one it would be very helpful to me.

Thanks,

Srujan

[Rahul_P]

Hello @srujan1981 

Please refer the redhat doc at [0] for detailed instructions on how you can enable the audit logging in Jboss.

Thanks,

Rahul Pandey

[0] https://developers.redhat.com/articles/2023/11/17/how-enable-jboss-eap-7-management-audit-log

[Pranay_M]

Hi @srujan1981,

You want to enable user audit logs in AEM Forms JEE. Can you please explain in detail what you mean by audit information. I am asking for this information because in JEE, by default only login failure events are captured in the logs.

If you wish to capture other information like successful login, locked out, logout events capture, you can enable the debug level logs for different classes as well.

Thanks
Pranay

[srujan1981]

Hi Pranay,

I am looking for tracking changes to user roles, permissions, user account management, un-authorization access logs in AEM JEE Forms server.

Regards,

Srujan

[Pranay_M · Accepted solution]

Hi @srujan1981,

I am not sure if you will be able to capture all the information as you mentioned in the previous note. However you can try to enable the debug log for the below class:

Class: “com.adobe.idp.um.businesslogic.authentication.AuthenticationManagerBean”

Additionally, Please fine below the correct format for the config  that you can customize and  update in the doamin_<db>.xml which can help create custom logs for the above mentioned class.

Example:

<periodic-rotating-file-handler name="SAMLLOGS" autoflush="true">
                <formatter>
                        <pattern-formatter pattern="%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%E%n"/>
                </formatter>
                <file relative-to="jboss.server.log.dir" path="custom_saml.log"/>
                        <suffix value=".yyyy-MM-dd"/>
                        <append value="false"/>
            </periodic-rotating-file-handler>
                <logger category="com.adobe.idp.um">
                        <level name="DEBUG"/>
                                <handlers>
                                        <handler name="SAMLLOGS"/>
                                </handlers>
                </logger>

[Khushwant_Singh]

@srujan1981 We wanted to check if the solution we provided by @Pranay_M  was helpful in resolving your issue. If everything is working fine now, that’s great! However, if you’re still experiencing any difficulties or need further assistance, let us know. Thanks!