[keycloak-user] Logging when in Impersonate mode

Stian Thorgersen sthorger at redhat.com
Thu Jan 14 02:57:31 EST 2016


You can also enable log output for events, and also configure what events
are logged

On 13 January 2016 at 21:50, Bill Burke <bburke at redhat.com> wrote:

> I'm sorry.  It isn't logged to console, but IMPERSONATE is an event.  You
> can filter and view it in the admin console, or even create a custom
> listener to listen for impersonate events.  Currently, to have it logged in
> the log file, you'll have to turn on debug mode for events
> "org.keycloak.events" .  I think I may change this so its logged.
> Currently only errors are logged to log file.
>
> On 1/13/2016 3:22 PM, Bill Burke wrote:
>
> It should be logged.  Search for IMPERSONATE in your log file.
>
> On 1/13/2016 3:13 PM, Rajees Patel wrote:
>
> Hi,
>
>
>
> For auditing reasons we have a requirement that all user actions are
> logged.
>
> If user X is impersonating user Y, is it possible that this be logged
> somewhere? i.e
>
>
>
> 13 Jan 2016 16:47:56 INFO User X is impersonating User Y
>
>
>
> We are concerned that user X may impersonate user Y and perform some
> malicious actions, and we will have no idea that this happened.
>
>
>
> Regards
>
> Raj
>
>
>
>
>
> Rajees Patel
>
> Product Architect
>
> Invenco Group Limited
>
> O: +64 9 905 5673
>
> <Rajees.Patel at invenco.com> <Rajees.Patel at invenco.com>
> Rajees.Patel at invenco.com
>
>
>
> * <http://www.invenco.com> <http://www.invenco.com>www.invenco.com
> <http://www.invenco.com>*
>
>
>
> *Disclaimer: This email is confidential and may be legally privileged.  If
> you are not the intended recipient you must not use any of the information
> in it and must delete the email immediately.*
>
>
>
>
>
>
> _______________________________________________
> keycloak-user mailing listkeycloak-user at lists.jboss.orghttps://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
> --
> Bill Burke
> JBoss, a division of Red Hathttp://bill.burkecentral.com
>
>
>
> _______________________________________________
> keycloak-user mailing listkeycloak-user at lists.jboss.orghttps://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
> --
> Bill Burke
> JBoss, a division of Red Hathttp://bill.burkecentral.com
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160114/6f55fd46/attachment.html 


More information about the keycloak-user mailing list