Shibboleth v3.2.1 - Add additional attributes to audit log for institutional Statistics

[Dave Perry]

Have you considered something like the JISC RAPTOR project? That lets you tie departments to users (assuming this information is in LDAP already), and parses the audit logs of shibboleth.
We aren't using ours now, as most of our eResources have very good admin / stats panels now, but we did try it early on.

If you go down that road, stick to just having the ICA part (which analyses the idp-audit.log files) on the IdP, and run Postgres with the MUA and the WEB parts on a physical box (MUCH faster to process, they run slowly on a VM).

Even if you don't use their WEB part, the MUA gets the ICA files into a neat database (I did make it work on MySQL, but Postgres is more supported) which you could query with your own code etc.

_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG
Extension 2230 / Direct Dial 01482 381930

* Need a fast reply? Try elearning at hull-college.ac.uk *

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Marco Malavolti
Sent: 28 July 2016 15:13
To: users at shibboleth.net
Subject: Shibboleth v3.2.1 - Add additional attributes to audit log for institutional Statistics

Hi all guys,

Does anybody know how to add additional attributes to audit log using audit.xml?

For Example: I would like to add user's department to audit log to perform a more deep statistic on the usage of the resources for a specific department of an Institution.

I've not found any working example on the web... :(

If someone has ready-to-use example or a step-by-step example it will be perfect for me.

Best Regards,

--
Marco Malavolti
Consortium GARR - Servizio IDEM GARR AAI Via dei Tizii, 6 - I-00185 (ROMA)
CF: 97284570583 - PI:07577141000
Skype: marco.mala



**********************************************************************
This message is sent in confidence for the addressee
only. It may  contain confidential or sensitive
information.  The contents are not to be disclosed
to anyone other than the addressee.  Unauthorised
recipients are requested to preserve this
confidentiality and to advise us of any errors in
transmission.  Any views expressed in this message
are solely the views of the individual and do not
represent the views of the College.  Nothing in this
message should be construed as creating a contract.

Hull College Group owns the email infrastructure, including the contents.

Hull College Group is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT