<div dir="ltr">You can also enable log output for events, and also configure what events are logged</div><div class="gmail_extra"><br><div class="gmail_quote">On 13 January 2016 at 21:50, Bill Burke <span dir="ltr"><<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
I'm sorry. It isn't logged to console, but IMPERSONATE is an
event. You can filter and view it in the admin console, or even
create a custom listener to listen for impersonate events.
Currently, to have it logged in the log file, you'll have to turn on
debug mode for events "org.keycloak.events" . I think I may change
this so its logged. Currently only errors are logged to log file.<div><div class="h5"><br>
<div>On 1/13/2016 3:22 PM, Bill Burke wrote:<br>
</div>
<blockquote type="cite">
It should be logged. Search for IMPERSONATE in your log file.<br>
<br>
<div>On 1/13/2016 3:13 PM, Rajees Patel
wrote:<br>
</div>
<blockquote type="cite">
<div>
<p class="MsoNormal">Hi, <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">For auditing reasons we have a
requirement that all user actions are logged. <u></u><u></u></p>
<p class="MsoNormal">If user X is impersonating user Y, is it
possible that this be logged somewhere? i.e<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Consolas;color:black">13
Jan 2016 16:47:56 INFO User X is impersonating User Y</span>
<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">We are concerned that user X may
impersonate user Y and perform some malicious actions, and
we will have no idea that this happened. <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Regards<u></u><u></u></p>
<p class="MsoNormal">Raj<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<table style="width:100.0%" border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm" valign="top">
<div>
<p class="MsoNormal" style="line-height:13.0pt"><span style="font-family:"Arial","sans-serif";color:#212121">Rajees
Patel<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:13.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#212121">Product
Architect<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:13.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#616162">Invenco
Group Limited<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:13.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#616162;text-transform:uppercase">O:
<a href="tel:%2B64%209%20905%205673" value="+6499055673" target="_blank">+64 9 905 5673</a><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:13.0pt"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#616162"><a href="mailto:Rajees.Patel@invenco.com" target="_blank"><span style="color:blue"></span></a><a href="mailto:Rajees.Patel@invenco.com" target="_blank"></a><a href="mailto:Rajees.Patel@invenco.com" target="_blank">Rajees.Patel@invenco.com</a></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="line-height:2.0pt"><span style="font-size:2.0pt;font-family:"Arial","sans-serif";color:#212121"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="line-height:13.0pt"><b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#212121"><a href="http://www.invenco.com" target="_blank"><span style="color:blue"></span></a><a href="http://www.invenco.com" target="_blank"></a><a href="http://www.invenco.com" target="_blank">www.invenco.com</a></span><u></u><u></u></b></p>
</div>
</td>
</tr>
<tr style="height:5.0pt">
<td style="padding:0cm 0cm 0cm 0cm;height:5.0pt"><br>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<table style="width:100.0%;border:none;border-top:solid #9e9e9e 1.0pt" border="1" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr style="height:3.0pt">
<td style="border:none;padding:0cm 0cm 0cm 0cm;height:3.0pt"><br>
</td>
</tr>
<tr style="height:3.0pt">
<td style="border:none;padding:0cm 0cm 0cm 0cm;height:3.0pt">
<table style="width:100.0%" border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td style="width:225.0pt;padding:0cm 0cm 0cm 0cm" valign="top" width="300">
<div>
<p class="MsoNormal" style="line-height:9.0pt"><b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#9e9e9e">Disclaimer:
This email is confidential and may be
legally privileged. If you are not
the intended recipient you must not
use any of the information in it and
must delete the email immediately.<u></u><u></u></span></b></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt;line-height:9.0pt"><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#9e9e9e"><br>
<br>
<u></u><u></u></span></p>
</div>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
<pre cols="72">--
Bill Burke
JBoss, a division of Red Hat
<a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a></pre>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
<pre cols="72">--
Bill Burke
JBoss, a division of Red Hat
<a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a></pre>
</div></div></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>