Any enterprise storage system should maintain useful audit logs. For example, if a workspace got deleted, you (or management) may very much want to know when it happened, under whose credentials, and from which computer.
Here's how you find that out in Nexis (in version 2021. See note below):
What:
1. In the Management Console, go to Logs > System Logs2. Select your SDA3. From the drop-down list of logs, select SD.log4. Filter the log data for "delet"5. You'll see login entries pertaining to deletions. Find the relevant one(s), and write down the timestamp.
Where:
1. From the same drop-down list of logs, select system.journal (if it happened more than a couple of hours ago, you'll need to traverse the older system journals in that dropdown list. It looks like it retains ~3 weeks of system logs, but this would vary based on your Nexis activity.)2. Filter the log data for "nxserver"3. You'll see login entries recording the IP address. Cross-reference their timestamp with the time of deletion from the SD log.
Who:
1. Go to System > Snapshots2. Click the camera icon on the right, type in a name, and click Create, to generate a system report (what Nexis calls a "Snapshot").3. Download the "Snapshot" you just created and unzip it.4. AdminLog.csv will contain a "Workspace deleted" entry, which will tell you the username who deleted the workspace - with a timestamp to cross-reference to the other logs.
Of course, if everyone in your organization shares logins, that part is going to be less helpful. Nexis now allows assiging different levels of administrative privileges to users and groups, with or without a Directory server, so it's definitely a good practice to set up individual logins for your Nexis users and especially anybody who performs administrative actions in it.
Note that as of version 2021.12, there's a bug in Nexis where the AdminLog "workspace deleted" entries omit the name of the workspace that was deleted(!). Also, the recorded IP address in AdminLog should be the one from system.journal instead of 127.0.0.1. Hence the above procedure.
Bob: Do you know if this was fixed in more recent releases? I'd be happy to hear if there are easier/better ways to obtain the above audit information.
That's the info!
Thanks.
Leaves the question why Avid hasn't included a web page in the Nexis interface combining this info in these logs in a readable form for the normal user.
Avid reseller ACSR at Telmaco
http://www.telmaco.gr/en/
There used to be an "Administration Log" on the old Nexis interface and it is very frustrating that they removed it. It could tell you when a workspace was created/deleted/renamed/resized and by who's ipaddress in real time.
When the new interface came out all the ipaddresses became 127.0.0.1 which became less helpful but still helpful, so having separate users would make it more useful.
Here is a different way to do this, though the downside of this method is that it isa point in time only and after downloading it is already old information.
Download Avid NEXIS Toolbox, connect to Nexis, run Log Aggregator, unzip Aggregator results, Navigate to SystemDirector folder, then admin_tool_log.csv
This has all the comings and goings from the Admin Logs.
It is a real shame Avid got rid of the LIVE log, I used all the time and it is clear that the info is there for that log to exist again. Bring it back please :)
Rory
© Copyright 2011 Avid Technology, Inc. Terms of Use | Privacy Policy | Site Map | Find a Reseller