Configuring an Admin Alert Access Log publisher - PingDirectory

Page created: 26 Jul 2021 |

Page updated: 7 Dec 2022

| 1 min read

9.0 Product PingDirectory Directory Capability Product documentation Content Type Administration User task IT Administrator Administrator Audience Software Deployment Method Configuration

Before configuring an Admin Alert Access Log, you must establish an administrative alert handler in your system.

For more information, see Working with Administrative Alert Handlers.

To create a criteria object for the Admin Alert Access Log, use dsconfig.

If you are using the dsconfig tool in interactive mode, the menu items for the criteria operations are located in the Standard objects menu.
For this example, we want to log only write operations that target user entries. The following command matches any of the specified operations whose target entry matches the filter (objectClass=person).
```
$ bin/dsconfig create-request-criteria --type simple \ 
  --criteria-name “User Updates” \ 
  --set operation-type:add \ 
  --set operation-type:delete \
  --set operation-type:modify \ 
  --set operation-type:modify-dn \ 
  --set “any-included-target-entry-filter:(objectClass=person)”
```

To create a log publisher of type admin-alert-access, use dsconfig.

$ bin/dsconfig create-log-publisher \ 
  --publisher-name ”User Updates Admin Alert Access Log” \ 
  --type admin-alert-access \ 
  --set “request-criteria:User Updates” \ 
  --set include-request-details-in-result-messages:true \ 
  --set enabled:true