topic Re: How to store library access by user in New SAS User

How to store library access by user

dpmf — Tue, 04 Jun 2019 10:14:34 GMT

Hi all,

Is there any way to save the library access by user?

I want to be able to gather info by day and user for any given library.

I use SAS 9.4 and we don't have SAS Log active / installed.

Best Regards,

Daniel

Re: How to store library access by user

Kurt_Bremser — Tue, 04 Jun 2019 12:13:08 GMT

How is your SAS set up? Do you have a central BI Server, or distributed desktop installations?

Re: How to store library access by user

dpmf — Tue, 04 Jun 2019 12:24:39 GMT

I'm a (new) sas Admin in a Telecom Company. I have access to the SAS server but every user has its SAS EG installed in the desktop.

I would want to have that config on the server side. We have one physical server with 7 App servers inside (sasapp, sasapp01, .... , sasapp06).

As per the help page https://blogs.sas.com/content/sgf/2015/09/30/part-1-auditing-data-access-who-did-what-and-when/

I do have a logconfig.apm.xml on each app server, folder /opt/sas/sasconfig/SASAPP/Lev1/SASAPP/WorkspaceServer/ but no 'Audit.Data.Dataset' logger specified.

Best Regards and thanks in advance,

Daniel

Re: How to store library access by user

Kurt_Bremser — Tue, 04 Jun 2019 12:52:49 GMT

Basically, you can do what the blog post does with the Stored Process Server.

BUT:

the Stored Process Server runs with a generic userid (typically sassrv), so all STP instances can write/append to the same log file. Workspace servers run with individual users, so you need to take care of that.

My solution would be to create separate rolling logs for each user in a directory that has "other" write permission.

Re: How to store library access by user

dpmf — Fri, 21 Jun 2019 13:47:53 GMT

Hi again,

So, i've tried to add this to the file logconfig.xml (it's this one that is eing called on sasv9)

And i keep getting the error on ObjectSpawner_console.log:

ERROR: Invalid option value "/opt/sas/sasconfig/sasappdv/Lev1/SASAppDV/WorkspaceServer/logconfig.xml" for SAS option LOGCONFIGLOC.
ERROR: (SASXKRIN): KERNEL RESOURCE INITIALIZATION FAILED.
ERROR: Unable to initialize the SAS kernel.

and this one on the daily server log:

The launch of the server (SASAppDV - Workspace Server) process failed due to a problem with the processing of the SAS Logging Facility configuration file (LOGCONFIGLOC).

I gave chmod 777 to the 'slogs' folder and 'setfacl rwx' to all parties.

any tip about this??

Best Regards,

Daniel

Re: How to store library access by user

Kurt_Bremser — Fri, 21 Jun 2019 14:25:54 GMT

What about the ownership and permissions of the logconfig.xml file itself?

Re: How to store library access by user

dpmf — Fri, 21 Jun 2019 15:00:13 GMT

ownership is sas:sas_adm

and permissions where -rw-r--r-- 1

changed it to 777 and didn't work 😞

Re: How to store library access by user

Kurt_Bremser — Fri, 21 Jun 2019 15:14:12 GMT

I can only suggest to revert back to the original configuration. Restore the original config files, verify that the server starts, and then implement one small change after the other.

Re: How to store library access by user

dpmf — Tue, 02 Jul 2019 12:41:28 GMT

Hi Kurt,

I had to undo that because i simply couldn't make it work. And i don't know XML or sintaxes to being able to insert only N lines each time...

I've opened a ticket to SAS support.

Thanks for your help!

Best regards

Re: How to store library access by user

dpmf — Wed, 31 Jul 2019 10:37:27 GMT

Hi all,

I've changed the logconfig.xml to this, as per other thread similar to this on this site:

</appender>

<logger name="Audit.Data.Dataset.Open" additivity="false">
<appender-ref ref="AuditLibraryFile"/>
<level value="Trace"/>
</logger>

<logger name="Audit.Data.Dataset.Delete" additivity="false">
<appender-ref ref="AuditLibraryFile"/>
<level value="Trace"/>
</logger>

<logger name="Audit.Data.Dataset.Rename" additivity="false">
<appender-ref ref="AuditLibraryFile"/>
<level value="Trace"/>
</logger>

One good news is that the logs are being generated and with the message translated from the string above.

But it is recording ONLY when i expand the SASAPP server and not when I expand the library (that is the objective here).

It prints like this:

2019-07-24T11:46:17,472!Audit.Data.Dataset.Open!xaccc44!jobid=20230 Action=OPEN Status=SUCCESS Libref=WORK Engine=V9 Member=_PRODSAVAIL MemberType=DATA Openmode=OUTPUT Path=/saswork/sas02/SAS_work7A3400004F06.xxxx.xxxx.xx/SAS_work083C00004F06_xxxxx.xxxxx.xx Sysrc=0 Sysmsg= username=xaccc44

I guess that this ouput would be enough if instead of libref=WORK it printed the libref=library_libref.

It's probably just a "technicality" that i'm missing, but it's the first time with this kind of configurations and your help would be hugely appreciated.

Best Regards,

Daniel