tracker issue : CF-4204065

select a category, or use search below
(searches all categories and all time range)
Title:

audit log line not reflecting an important admin change made

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/Fixed

Reporter/Name(from Bugbase): Charlie A. / ()

Created: 03/05/2019

Components: Logging, Audit Logs

Versions: 2016,2018

Failure Type: Incorrectly functioning

Found In Build/Fixed In Build: 2018.0.03.314033 / 2020.0.0.314550

Priority/Frequency: Normal / All users will encounter

Locale/System: / Windows 10 64 bit

Vote Count: 0

Folks, I just noticed a problem in CF2018's logging of an admin change (I did not test on 2016 or earlier).

I had changed the CF admin logging settings page, to enable "scheduled task logging", and the audit log line shows this:

"Information","http-nio-8500-exec-1","03/05/19","09:31:35","CFADMIN","User admin changed Logging settings.Old values were --> Log directory  : D:\ColdFusion2018\cfusion\logs, Maximum file size: 5000, Maximum number of archives: 10,  Log slow pages taking longer than: 30.New values are --> Log directory  : D:\ColdFusion2018\cfusion\logs, Maximum file size : 5000Maximum number of archives: 10,  Log slow pages taking longer than: 30 "

Notice that it does NOT log the change to task logging.

As the audit log is important for tracking WHAT changed, it is a problem that this change is NOT logged.

While on the subject, I will note as well that a related problem is that MANY changes to the admin are not logged at all. It would be helpful if Adobe could identify somewhere what changes ARE and ARE NOT logged (and why those NOT logged are not logged, even if it's a blanket assertion that those are deemed "not important enough to log".)

Attachments:

Comments:

@Charlie I tried changing the value from  the admin CF2018HF3, values are reflected in the Audit log as below: "Information","http-nio-8500-exec-1","03/12/19","13:41:33","CFADMIN","User admin changed Logging settings.Old values were --> Log directory  : C:\ColdFusion2018\cfusion\logs, Maximum file size: 5000, Maximum number of archives: 10,  Log slow pages taking longer than: 30.New values are --> Log directory  : C:\ColdFusion2018\cfusion\logs, Maximum file size : 6000 Maximum number of archives: 20,  Log slow pages taking longer than: 60 " Please let us know if you are trying anything different ?  
Comment by Dattanand M.
30472 | March 12, 2019 08:16:52 AM GMT
Dattanand, I AM indeed trying something different than you. Please read my ticket more carefully. I can see that you changed the log archive value from 10 to 20, and that did show up. But I'm not denying that it would. My ticket title referred to "an important change" (not "any change") not being logged, and I specifically indicated that it was that I had changed "scheduled task logging", which was not logged in the audit log. And FWIW, your lines shown are basically the same as I had showed. Notice how in my case, they do NOT reflect the change in "scheduled task logging" being enabled.
Comment by Charlie A.
30481 | March 12, 2019 03:54:16 PM GMT
Can anyone from Adobe explain please what the change of "Target version" to be "alpha" means? Would I be right to guess that this would be targeted for the next version of CF (2020?) And that by "alpha" it means it's hoped to be something easy enough to get into its first build? But even as encouraging as that may be, does it mean also that it would NOT be targeted to be implemented as an update for CF2018 or 2016? Thanks.
Comment by Charlie A.
30499 | March 13, 2019 06:46:58 PM GMT
@Charlie Target version Alpha means , the fix will be available in the alpha build of next release.
Comment by Dattanand M.
30882 | June 06, 2019 04:58:23 AM GMT
Great, thanks.
Comment by Charlie A.
30883 | June 06, 2019 07:06:01 PM GMT
Also, are you just fixing the fact that this ONE admin change is not logged? Or have you identified and fixed the many other admin changes that are not logged? If you will not be changing it to log ALL changes, can you point us to something that clarifies what is and is not logged in the audit log when changed in the admin?
Comment by Charlie A.
30898 | June 10, 2019 01:13:54 PM GMT