Any ideas? Logging user activity on repositories

[Rob ten Hove-2]

Some days ago I posted a question with respect to user activity on
repositories. Until now I did not get a single response, so allow me to
bring this to your attention once more ;-) I also added more info to the
question.

---

Is there any way of logging user activity on repositories, i.e. artifact
downloading/uploading? If I look at the Archiva audit log documentation
I would say that it can handle the 'upload' part of the logging. But
what about the 'download' part?

I connected to Archiva with Maven, HTTP wagon, using a different
username than 'guest'. I downloaded some artifacts and looked at the
Tomcat access log, and it contains the GET requests, but it does not
contain the user name, although the %u (username) pattern is included in
the log format. In the HTTP traffic I can see authentication
information, amongst it my base64 encoded username/password. Is Archiva
able to log this somehow, or can Tomcat do it?

I'm using:
- Archiva 1.1.2
- Maven 2.0.9
- Tomcat 5.5.26

Thanks in advance for your responses,

Rob ten Hove

Unclassified


------------------------------------------------------------------------------------------------------------
Disclaimer:

If you are not the intended recipient of this email, please notify the sender and delete it.
Any unauthorized copying, disclosure or distribution of this email or its attachment(s) is forbidden.
Thales Nederland BV will not accept liability for any damage caused by this email or its attachment(s).
Thales Nederland BV is seated in Hengelo and is registered at the Chamber of Commerce under number 06061578.
------------------------------------------------------------------------------------------------------------

[Jevica Arianne Zurbano]

Hi Rob,

Download of artifacts in Archiva is not included in the operations being
logged.

And this operation is on Archiva, I am not sure if Tomcat can do it.


Rob ten Hove wrote:

> Some days ago I posted a question with respect to user activity on
> repositories. Until now I did not get a single response, so allow me
> to bring this to your attention once more ;-) I also added more info
> to the question.
>
> ---
>
> Is there any way of logging user activity on repositories, i.e.
> artifact downloading/uploading? If I look at the Archiva audit log
> documentation I would say that it can handle the 'upload' part of the
> logging. But what about the 'download' part?
>
> I connected to Archiva with Maven, HTTP wagon, using a different
> username than 'guest'. I downloaded some artifacts and looked at the
> Tomcat access log, and it contains the GET requests, but it does not
> contain the user name, although the %u (username) pattern is included
> in the log format. In the HTTP traffic I can see authentication
> information, amongst it my base64 encoded username/password. Is
> Archiva able to log this somehow, or can Tomcat do it?
>
> I'm using:
> - Archiva 1.1.2
> - Maven 2.0.9
> - Tomcat 5.5.26
>
> Thanks in advance for your responses,
>
> Rob ten Hove
>
> Unclassified
>
>
> ------------------------------------------------------------------------------------------------------------
>
> Disclaimer:
>
> If you are not the intended recipient of this email, please notify the
> sender and delete it. Any unauthorized copying, disclosure or
> distribution of this email or its attachment(s) is forbidden. Thales
> Nederland BV will not accept liability for any damage caused by this
> email or its attachment(s). Thales Nederland BV is seated in Hengelo
> and is registered at the Chamber of Commerce under number 06061578.
> ------------------------------------------------------------------------------------------------------------
>
>
>

--

Thanks,

Jev

[Wendy Smoak-3]

On Thu, May 28, 2009 at 10:20 PM, Rob ten Hove
<rob.tenhove@...> wrote:

> Is there any way of logging user activity on repositories, i.e. artifact
> downloading/uploading? If I look at the Archiva audit log documentation I
> would say that it can handle the 'upload' part of the logging. But what
> about the 'download' part?

If Archiva doesn't currently do this, it seems like a reasonable
request for the audit log.  Check JIRA to see if anyone has requested
it yet, and enter it if not.

Have you checked whether it logs when you use 'mvn deploy' vs. the Web
form to upload?

It should probably be configurable as it would fill up the log quickly
in a large dev environment, and logging thousands of downloads from
'guest' might not be desired.

--
Wendy

[Rob ten Hove-2]

On 01-06-2009 19:28, Wendy Smoak wrote:

> On Thu, May 28, 2009 at 10:20 PM, Rob ten Hove
> <rob.tenhove@...> wrote:
>  
>> Is there any way of logging user activity on repositories, i.e. artifact
>> downloading/uploading? If I look at the Archiva audit log documentation I
>> would say that it can handle the 'upload' part of the logging. But what
>> about the 'download' part?
>>    
>
> If Archiva doesn't currently do this, it seems like a reasonable
> request for the audit log.  Check JIRA to see if anyone has requested
> it yet, and enter it if not.
>  

Thanks Jevica and Wendy for your responses. AFAIK there is no issue for
this in JIRA so I added one: MRM-1195.
> Have you checked whether it logs when you use 'mvn deploy' vs. the Web
> form to upload?
>  
Although I didn't test it, according to the documentation the web form
upload is logged. I did test a 'mvn deploy' and this is logged.
> It should probably be configurable as it would fill up the log quickly
> in a large dev environment, and logging thousands of downloads from
> 'guest' might not be desired.
>  
Yes it should be configurable. Maybe per repository.

Greetings,

Rob
Unclassified


------------------------------------------------------------------------------------------------------------
Disclaimer:

If you are not the intended recipient of this email, please notify the sender and delete it.
Any unauthorized copying, disclosure or distribution of this email or its attachment(s) is forbidden.
Thales Nederland BV will not accept liability for any damage caused by this email or its attachment(s).
Thales Nederland BV is seated in Hengelo and is registered at the Chamber of Commerce under number 06061578.
------------------------------------------------------------------------------------------------------------