topic Re: SAS AML 7.1 logging details information in Administration and Deployment

SAS AML 7.1 logging details information

kranthi214 — Thu, 23 Jul 2020 16:04:51 GMT

Hi Team,

We are using SAS AML 7.1 in our organization and i am new to this product. Need an expert help on the below query.

We are looking for some audit events in a real time manner or through a batch such as whenever a user/group/role added/deleted/modified in the SAS management console and login and logout time of the user.

Can you please let me know is there any way to get the information?

When we check in Metadata server logs we are getting a basic information of login and logout events.

/sas/SASConfig/Lev1/SASMeta/MetadataServer/Logs

Regards,

Kranthi

Re: SAS AML 7.1 logging details information

AnandVyas — Fri, 24 Jul 2020 02:31:53 GMT

Hi @kranthi214

SAS Environment manager has an add-on package "Service Architecture Framework" which has to be initialized in order to enable extra logging and capturing the metrics required. This will also enable few out-of-the-box reports based on the extended data captured.

You can find the steps in order to initialize this framework in the link below. The doc is ver. 9.4M3 however the steps would be similar for M5 as well.

- https://support.sas.com/rnd/emi/SASEnvMgr/EVSAF/SAS_Environment_Manager_Service_Architecture_Quickst...

Once you have this initialized you can find the default reports in the report center. Details here - https://documentation.sas.com/?docsetId=evug&docsetTarget=n1iilfckx4t7amn13erb3i5g98mp.htm&docsetVer...

This PDF is a good doc listing all the reports and a brief description. The ones you might be interested in is under the section Audit Reports (Log Forensic) - https://support.sas.com/rnd/emi/SASEnvMgr/EVSAF/Report_Center_Report_Listings.pdf

Re: SAS AML 7.1 logging details information

kranthi214 — Fri, 24 Jul 2020 03:32:13 GMT

Dear @AnandVyas ,

Thanks a lot for your response.

Upon going through the document I could not able to find validate.sh script on our MetaData server as per the below document mentioned under Framework Validation Pre-Check section.

Also for SAS EVM do we require a special license?

https://support.sas.com/rnd/emi/SASEnvMgr/EVSAF/SAS_Environment_Manager_Service_Architecture_Quickstart_9.4M3.pdf

We are having the below folder structure.

<<root>>/Web/SASEnvironmentManager/

smart-agent
emi-client
agent-5.8.0-EE
hq-plugins
server-5.8.0-EE

Under emi-client below scripts are listed.

log_discovery.sh
log_collect.sh
sts_collect.sh
client_info.sh

Re: SAS AML 7.1 logging details information

AnandVyas — Fri, 24 Jul 2020 04:30:26 GMT

It should be on the compute server. Kindly note that you should take cold backups of your system if you are going to initialize the framework. There is no way to revert it back without cold backup.

Re: SAS AML 7.1 logging details information

kranthi214 — Sat, 25 Jul 2020 12:55:54 GMT

Thanks Aditya.