Below is the message you get in metadata log when some user remove a role from group or add a role to a group.
2016-01-15T13:51:56,249 INFO [10777807] 4216288:venkat.heart - Removed Member IdentityType=IdentityGroup Name=Group Developers, ObjId=XXXXXXXXX.XXXXXXXX from Role Name=Management Console: Scheduler Only, ObjId=XXXXXXXXX.XXXXXXXX.
2016-01-15T13:52:34,522 INFO [10779877] 4216288:venkat.heart - Added Member IdentityType=IdentityGroup Name=Group Admin, ObjId=XXXXXXXXX.XXXXXXXX to Role Name=Management Console: Scheduler Only, ObjId=XXXXXXXXX.XXXXXXXX.
If this is made by some unknown user then search with following term.
[sas@fghg9 Logs]$ grep Removed SASMeta_MetadataServer_XXXXXX_fghg9_XXXXX.log
or
[sas@fghg9 Logs]$ grep Removed SASMeta_MetadataServer_XXXXXX_fghg9_XXXXX.log | grep Role
or
2016-01-15T13:51:56,249 INFO [10777807] 4216288:venkat.heart - Removed Member IdentityType=IdentityGroup Name=Group Developers, ObjId=XXXXXXXXX.XXXXXXXX from Role Name=Management Console: Scheduler Only, ObjId=XXXXXXXXX.XXXXXXXX.
2016-01-15T13:52:34,522 INFO [10779877] 4216288:venkat.heart - Added Member IdentityType=IdentityGroup Name=Group Admin, ObjId=XXXXXXXXX.XXXXXXXX to Role Name=Management Console: Scheduler Only, ObjId=XXXXXXXXX.XXXXXXXX.
If this is made by some unknown user then search with following term.
[sas@fghg9 Logs]$ grep Removed SASMeta_MetadataServer_XXXXXX_fghg9_XXXXX.log
or
[sas@fghg9 Logs]$ grep Removed SASMeta_MetadataServer_XXXXXX_fghg9_XXXXX.log | grep Role
or
[sas@fghg9 Logs]$ grep Removed SASMeta_MetadataServer_XXXXXX_fghg9_XXXXX.log | grep Role| grep Management
Comments
Post a Comment