BlueCat Gateway logs the users’ IP addresses who log into Gateway. User logins and logouts are captured in the messages.log file.
Note: In previous releases of BlueCat, user logins and logouts were captured in the file, login.log. If necessary, update your environment to capture these events in messages.log.
The messages.log file records the following information for the login and logout events:
- Details (such as via UI endpoint, via REST API endpoint, via SSO, or via ACS)
- IP address
[2021-04-01 19:54:36.451528] [wsgi] [INFO] [main_app] [login] portalUser@172.17.0.1 logged in via UI endpoint [2021-04-01 19:55:04.625712] [wsgi] [INFO] [main_app] [logout] portalUser@172.17.0.1 logged out via api