Enable Alert Definition Change Logging

The Hyperic audit subsystem logs changes made to alert definitions. When an alert definition is enabled, disabled, or deleted, the event is written to the database. The information includes the username of the person who made the change.

You can configure Hyperic Server to also write the audit events to the server.log file in the server's logs directory. To do so, add the following section to ServerHome/conf/server-log4j.xml, near the end of the file, before the root stanza.

<!-- Use this category to log every instance of a group alert firing.
          Comment out if the log messages become unwieldy. -->
 <category name="org.hyperic.hq.galerts.processor.MemGalertDef.Fired">
   <priority value="DEBUG" />

name="org.hyperic.hq.common.server.session.AuditManagerEJBImpl"> <!--SEE
HERE -->
    <priority value="DEBUG"/>

The entries are written to logs/server.log, similar to the following:

2009-03-18 15:56:20,088 INFO [main][org.hyperic.hq.common.server.session.AuditManagerEJBImpl@259] Audit Manager starting up
2009-03-18 15:58:28,223 DEBUG [main][org.hyperic.hq.common.server.session.AuditManagerEJBImpl@87] Audit:Audit[user=admin,purpose=12288,time=1237409692209,resource=,msg=HQ Started]
2009-03-18 16:01:12,114 DEBUG [UserLoginListener1][org.hyperic.hq.common.server.session.AuditManagerEJBImpl@87] Audit:Audit[user=hqadmin,purpose=16384,time=1237410072113,resource=,msg=HQ Administrator logged in]
2009-03-18 16:05:18,485 DEBUG [http-][org.hyperic.hq.common.server.session.AuditManagerEJBImpl@87]Audit:Audit[user=hqadmin,purpose=20482,time=1237410318484,resource=Linux,msg=Alert definition deleted (High Load)]