Regarding shibboleth Audit log template with cacti
Peter Schober
peter.schober at univie.ac.at
Sat Dec 23 09:19:34 EST 2017
* vaishali prajapati <vbprajapati39 at gmail.com> [2017-12-23 14:26]:
> cacti.log contains:
I know nothing about cacti, sorry.
> runidpstats.sh contains <b>/usr/bin/tac
> /opt/shibboleth-idp/logs/idp-audit.log | awk -f /usr/local/bin/parselog.awk
> |/usr/local/bin/loganalysis.py -t -</b>
> that results : rp:0 l:0 u:0
I have not looked at what the awk filter at
https://docs.cacti.net/usertemplate:graph:shibboleth:idp_audit_log
is supposed to do. That's Jehan's contribution, maybe he'll answer.
As the result is bogus when using the filter (but OK when not using
the filter) maybe just don't use the filter?
> cat /opt/shibboleth-idp/logs/idp-audit.log
> |/usr/local/bin/loganalysis.py -t -
> that results : rp:1 l:2 u:1
Yes, that at least works as intended.
> cat /opt/shibboleth-idp/logs/idp-audit.log
> |/usr/local/bin/loganalysis.py -cul -
> 1 unique relying party
> 1 unique userid
> 2 logins
Same here.
> I am using cacti 1.1.28 Please inform if any changes needed in
> default template.
Unless Jehan provides support on how to use his contribution your best
bet is probably asking about this in a Cacti-specific forum.
The Shibboleth IDP merely provides the raw data, and the
loganalysis.py merely splits that up into a friendler format.
What you do with that data and how tools use that as their input is
up to those tools, and not the software that produced the underlying
raw data.
All the Shibboleth wiki contains (and in the contribution section) at
https://wiki.shibboleth.net/confluence/display/SHIB2/IdP+Audit+Log+Cacti+Graph
is a reference to an external site, at
https://docs.cacti.net/usertemplate:graph:shibboleth:idp_audit_log
That pretty much sums up the involvement of the Shibboleth project
with that code.
But maybe someone else here is using that code and can help.
Or they're using someting else, possibly even much better, and are
willing to share.
-peter
More information about the users
mailing list