Where are Logfiles stored

🍱 Features & apps impersonate
1

Hello everybody,

could anybody please tell me the location of the logfiles for the impersonate App?
The audit and nextcloud.log are empty …

Greetings

2

I do not use the app Impersonate
But because of this i think it is only logged in /path/to/nextcloud/data/nextcloud.log.

Because mostly the admin has got access to the app and to the log the log makes no really sense.

Also i don’t know if the app is really GDPR compliant. Compliance - Nextcloud . I do not use the app and cannot recommend it. It seems to me that it makes much more sense to use a normal remote maintenance where the user is actively involved.

3

In default, nextcloud.log file stores impersonate logs
such as:

{"reqId":"eBZ39YPELNC3LlHPCI4y","level":2,"time":"26.09.2022, 14:36:02","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"User root trying to impersonate user 2BE98F99-8969-4CEA-9F71-FC6CB5970795","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"eBZ39YPELNC3LlHPCI4y","level":2,"time":"26.09.2022, 14:36:02","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"Changing to user 2BE98F99-8969-4CEA-9F71-FC6CB5970795","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"BYvyRhouQFnTjPdHTaiP","level":2,"time":"26.09.2022, 14:50:54","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"User root trying to impersonate user 2BE98F99-8969-4CEA-9F71-FC6CB5970795","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"BYvyRhouQFnTjPdHTaiP","level":2,"time":"26.09.2022, 14:50:54","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"Changing to user 2BE98F99-8969-4CEA-9F71-FC6CB5970795","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"jyfy8Xmx8ozFngp940rn","level":2,"time":"26.09.2022, 14:53:15","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"User root trying to impersonate user johndoe","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"jyfy8Xmx8ozFngp940rn","level":2,"time":"26.09.2022, 14:53:15","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"Changing to user johndoe","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
4

Thank you, but i cant find any impersonate related entryies there, have you an idea?

5

No. But what did I do:
I Install audit apps, and set config.php like this:

...

  'logfile' => '/data/nextcloud.log',
...
  'log.condition' => 
  array (
    'apps' => 
    array (
      0 => 'admin_audit',
    ),
  ),
);

Then go to directory that containt nextcloud.log. Run:

root@XXX:/data# tail -n 100 nextcloud.log |grep impersonate

{"reqId":"eBZ39YPELNC3LlHPCI4y","level":2,"time":"26.09.2022, 14:36:02","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"User root trying to impersonate user 2BE98F99-8969-4CEA-9F71-FC6CB5970795","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"eBZ39YPELNC3LlHPCI4y","level":2,"time":"26.09.2022, 14:36:02","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"Changing to user 2BE98F99-8969-4CEA-9F71-FC6CB5970795","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"BYvyRhouQFnTjPdHTaiP","level":2,"time":"26.09.2022, 14:50:54","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"User root trying to impersonate user 2BE98F99-8969-4CEA-9F71-FC6CB5970795","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"BYvyRhouQFnTjPdHTaiP","level":2,"time":"26.09.2022, 14:50:54","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"Changing to user 2BE98F99-8969-4CEA-9F71-FC6CB5970795","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"jyfy8Xmx8ozFngp940rn","level":2,"time":"26.09.2022, 14:53:15","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"User root trying to impersonate user johndoe","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}
{"reqId":"jyfy8Xmx8ozFngp940rn","level":2,"time":"26.09.2022, 14:53:15","remoteAddr":"10.65.8.100","user":"root","app":"impersonate","method":"POST","url":"/nextcloud/apps/impersonate/user","message":"Changing to user johndoe","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36","version":"24.0.4.1","data":{"app":"impersonate"}}

That’s all

6 
  array (
    0 => 'files_texteditor',
    1 => 'ownpad',
    2 => 'flowupload',
    3 => 'files_readmemd',
    4 => 'whiteboard',
    5 => 'onlyoffice',
    6 => 'twofactor_u2f',
  ),
  'log.condition' =>
  array (
    'apps' =>
    array (
      0 => 'admin_audit',
    ),

Okay, i think i should be add impersonate in the array right?

7

I dont know. I just share with you how it works in my system :slight_smile: