You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@archiva.apache.org by Rob ten Hove <ro...@nl.thalesgroup.com> on 2009/05/29 07:20:22 UTC

Any ideas? Logging user activity on repositories

Some days ago I posted a question with respect to user activity on 
repositories. Until now I did not get a single response, so allow me to 
bring this to your attention once more ;-) I also added more info to the 
question.

---

Is there any way of logging user activity on repositories, i.e. artifact 
downloading/uploading? If I look at the Archiva audit log documentation 
I would say that it can handle the 'upload' part of the logging. But 
what about the 'download' part?

I connected to Archiva with Maven, HTTP wagon, using a different 
username than 'guest'. I downloaded some artifacts and looked at the 
Tomcat access log, and it contains the GET requests, but it does not 
contain the user name, although the %u (username) pattern is included in 
the log format. In the HTTP traffic I can see authentication 
information, amongst it my base64 encoded username/password. Is Archiva 
able to log this somehow, or can Tomcat do it?

I'm using:
- Archiva 1.1.2
- Maven 2.0.9
- Tomcat 5.5.26

Thanks in advance for your responses,

Rob ten Hove

Unclassified


------------------------------------------------------------------------------------------------------------
Disclaimer:

If you are not the intended recipient of this email, please notify the sender and delete it. 
Any unauthorized copying, disclosure or distribution of this email or its attachment(s) is forbidden. 
Thales Nederland BV will not accept liability for any damage caused by this email or its attachment(s). 
Thales Nederland BV is seated in Hengelo and is registered at the Chamber of Commerce under number 06061578.
------------------------------------------------------------------------------------------------------------


Re: Any ideas? Logging user activity on repositories

Posted by "Jevica Arianne B. Zurbano" <je...@gmail.com>.
Hi Rob,

Download of artifacts in Archiva is not included in the operations being 
logged.

And this operation is on Archiva, I am not sure if Tomcat can do it.


Rob ten Hove wrote:
> Some days ago I posted a question with respect to user activity on 
> repositories. Until now I did not get a single response, so allow me 
> to bring this to your attention once more ;-) I also added more info 
> to the question.
>
> ---
>
> Is there any way of logging user activity on repositories, i.e. 
> artifact downloading/uploading? If I look at the Archiva audit log 
> documentation I would say that it can handle the 'upload' part of the 
> logging. But what about the 'download' part?
>
> I connected to Archiva with Maven, HTTP wagon, using a different 
> username than 'guest'. I downloaded some artifacts and looked at the 
> Tomcat access log, and it contains the GET requests, but it does not 
> contain the user name, although the %u (username) pattern is included 
> in the log format. In the HTTP traffic I can see authentication 
> information, amongst it my base64 encoded username/password. Is 
> Archiva able to log this somehow, or can Tomcat do it?
>
> I'm using:
> - Archiva 1.1.2
> - Maven 2.0.9
> - Tomcat 5.5.26
>
> Thanks in advance for your responses,
>
> Rob ten Hove
>
> Unclassified
>
>
> ------------------------------------------------------------------------------------------------------------ 
>
> Disclaimer:
>
> If you are not the intended recipient of this email, please notify the 
> sender and delete it. Any unauthorized copying, disclosure or 
> distribution of this email or its attachment(s) is forbidden. Thales 
> Nederland BV will not accept liability for any damage caused by this 
> email or its attachment(s). Thales Nederland BV is seated in Hengelo 
> and is registered at the Chamber of Commerce under number 06061578.
> ------------------------------------------------------------------------------------------------------------ 
>
>
>

-- 

Thanks,

Jev


Re: Any ideas? Logging user activity on repositories

Posted by Rob ten Hove <ro...@nl.thalesgroup.com>.
On 01-06-2009 19:28, Wendy Smoak wrote:
> On Thu, May 28, 2009 at 10:20 PM, Rob ten Hove
> <ro...@nl.thalesgroup.com> wrote:
>   
>> Is there any way of logging user activity on repositories, i.e. artifact
>> downloading/uploading? If I look at the Archiva audit log documentation I
>> would say that it can handle the 'upload' part of the logging. But what
>> about the 'download' part?
>>     
>
> If Archiva doesn't currently do this, it seems like a reasonable
> request for the audit log.  Check JIRA to see if anyone has requested
> it yet, and enter it if not.
>   
Thanks Jevica and Wendy for your responses. AFAIK there is no issue for 
this in JIRA so I added one: MRM-1195.
> Have you checked whether it logs when you use 'mvn deploy' vs. the Web
> form to upload?
>   
Although I didn't test it, according to the documentation the web form 
upload is logged. I did test a 'mvn deploy' and this is logged.
> It should probably be configurable as it would fill up the log quickly
> in a large dev environment, and logging thousands of downloads from
> 'guest' might not be desired.
>   
Yes it should be configurable. Maybe per repository.

Greetings,

Rob
Unclassified


------------------------------------------------------------------------------------------------------------
Disclaimer:

If you are not the intended recipient of this email, please notify the sender and delete it. 
Any unauthorized copying, disclosure or distribution of this email or its attachment(s) is forbidden. 
Thales Nederland BV will not accept liability for any damage caused by this email or its attachment(s). 
Thales Nederland BV is seated in Hengelo and is registered at the Chamber of Commerce under number 06061578.
------------------------------------------------------------------------------------------------------------


Re: Any ideas? Logging user activity on repositories

Posted by Wendy Smoak <ws...@gmail.com>.
On Thu, May 28, 2009 at 10:20 PM, Rob ten Hove
<ro...@nl.thalesgroup.com> wrote:

> Is there any way of logging user activity on repositories, i.e. artifact
> downloading/uploading? If I look at the Archiva audit log documentation I
> would say that it can handle the 'upload' part of the logging. But what
> about the 'download' part?

If Archiva doesn't currently do this, it seems like a reasonable
request for the audit log.  Check JIRA to see if anyone has requested
it yet, and enter it if not.

Have you checked whether it logs when you use 'mvn deploy' vs. the Web
form to upload?

It should probably be configurable as it would fill up the log quickly
in a large dev environment, and logging thousands of downloads from
'guest' might not be desired.

-- 
Wendy