Log files location

Log files of all .Net components and utilities are written to text files located in the logs folders:

• /etc/indeed/indeed-pam/logs/Component_name/
• C:\inetpub\wwwroot\pam\Component_name\logs\
• C:\Program Files\Indeed\Indeed PAM\Gateway\ProxyApp\logs\
• [indeed-pam-windows\MISC]\utilities folder\logs\

Description of the log files of the components: Core, IDP, LS

ProxyApp

Logs are written to the folder: C:\Program Files\Indeed\Indeed PAM\Gateway\ProxyApp\logs\shortDate\processId to separate logs from multiple runs on the same day. It is possible that there are two log files in the folder:

• ffmpeg.log — debugging information from ffmpeg
• Pam.Proxy.App.log — all other logs

Utilities

All logs are written to the one file. Log file name doesn't contain a date. Log file name contains the name of the utility. For example: Pam.Tools.Migrator.log

Native components logging

The list of the native components is following:

• MstscAddin
• WindowsAgent
• Pam.Service
• Pam.Putty
• ProcessCreateHook

To enable/receive logs, you can use the Indeed GetLog utility. Logs are saved to a directory C:\\Windows\\System32\\LogFiles\\Indeed-ID. Each process has its own separate directory.

nix components logging

SSH Proxy

All logs are written to the one file — ${ISODate}.log.

File location: /etc/indeed/indeed-pam/logs/ssh/

PAMSU

All logs generated by our code are written to the one file — ${ISODate}.log.
File location: /opt/Indeed-PAM/pamsu/logs/.

In addition, it is possible to enable logging of code provided by sudo. This is done via changes to the file /etc/pamsu.conf. The rules for setting up and managing are the same as for sudo. See man sudo.conf.

Configuring logging

A json file is used for logging configuration (appsettings.json).

Configuration appsettings.json

File appsettings.json locates at:

• C:\inetpub\wwwroot\pam\component_name\appsettings.json - management server Windows.
• C:\Program Files\Indeed Identity\Indeed PAM\Gateway\ProxyApp\appsettings.json - access server Windows.
• /etc/indeed-identity/indeed-pam/component_name/appsettings.json - management or access server Linux.

Section NLog

• The variables parameter is a section where you can set variables to further configure logging. The number of variables is unlimited. This parameter is optional.

  "variables": { "minLevel": "Trace", "dbMinLevel": "Info" }

  
  

Each log entry has a level. And each logger is configured to include or ignore certain levels. A common configuration is to specify the minimum level where that level and higher levels are included. For example, if the minimum level is Info, then Info, Warn, Error and Fatal are logged, but Debug and Trace are ignored.

The log levels ordered by severity:

The common configuration is to specify a minimum level in which this level and higher levels are included. For example, if the minimum level is Info, then Info, Warn, Error and Fatal are registered, but Debug and Trace are ignored.

• Section rules - controls how LogEvents from the Logger-objects are redirected to output targets.

  • Each type of log has its own name, which is not recommended to edit.

    "Rules": { "03_Hangfire": { "logger": "Hangfire.*", "minLevel": "Info", "writeTo": "hangfireFile", "final": true }, "20_Errors": { "logger": "*", "minLevel": "Error", "writeTo": "errorsFile" }, "40_Commands": { "logger": "Idp.Application.*Command", "minLevel": "${minLevel}", "writeTo": "commandsFile", "Enabled": false }, }

    
    

For each type of log, you can specify the following tags:

1. logger —  logger name — this is usually the name of the element associated with the log line in the code (class name). May contain wildcard characters (* and ?). Thus, the rule name '*' corresponds to any logger name, and 'Common*' corresponds to all loggers whose names begin with 'Common'. It is not recommended to edit this parameter.
   
2. LogLevel — logging levels, it is possible to specify several levels at once:
1. minlevel — minimum level to log.
2. maxlevel — maximum level to log.
3. level — single level to log.
4. levels — comma separated list of levels to log.
3. writeTo — comma separated list of targets to write to.
4. final — no rules are processed after a final rule matches.
5. enabled — set to false to disable the rule without deleting it.

• parameter targets – defines log targets/outputs (optional parameter)
  
• parameter extensions – loads NLog extensions from the *.dll file (optional parameter)
• parameter include – includes external configuration file (optional parameter)

Configuring NLog.json file

Each component that records logs has a file NLog.json, which specifies where and how logs will be recorded.
For Windows NLog.json file locates in the same path as the appsettings file.json and is configured for each component separately.

Section NLog

• Parameter variables - sets the value of a configuration variable.  The number of variables is unlimited. (optional parameter).

Section targets

Each type of log has its own name, which is not recommended to edit.

• type — The type of the saved log. Editing is not recommended.

• layout — Тhe text to be displayed. Editing is not recommended.
• fileName — Recording logs directory.
• archiveFileName — Storing directory for filled logs.
• archiveAboveSize — Maximum size of log file, specified in bytes.
• archiveNumbering — Method of numbering file archives.
• maxArchiveFiles — The number of stored filled logs . Old filled logs are deleted when new ones appear.

Example of configuration for errors log:

"targets":{
	"errorsFile":  {
        "type": "File",
        "layout": "${loggerLayout}",
        "fileName": "C:\Logs\errors.log",
        "archiveFileName": "C:\\LogsArch\\errors.{#####}.log",
        "archiveAboveSize": 1000000,
        "archiveNumbering": "Sequence",
        "maxArchiveFiles": 2
      	     		}
}

Log rotation is not enabled by default.