BlueCat Gateway logs the IP addresses of users who log into Gateway. User logins and logouts are captured in the messages.log file.
Note: In previous releases, user logins and logouts were captured in the file
login.log. If necessary, update your environment to capture
these events in messages.log.
The messages.log file records the following information for the login and logout events:
Username
Details (such as via UI endpoint, via REST API endpoint, via SSO, or via ACS)
IP address
Timestamp
For example:
[2021-04-01 19:54:36.451528] [wsgi] [INFO] [main_app] [login] portalUser@172.17.0.1 logged in via UI endpoint
[2021-04-01 19:55:04.625712] [wsgi] [INFO] [main_app] [logout] portalUser@172.17.0.1 logged out via api