Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature Request] Advanced Detailed Logging and Features to accommodate #2095

Open
NavCC opened this issue Dec 6, 2024 · 4 comments
Open

Comments

@NavCC
Copy link

NavCC commented Dec 6, 2024

Feature Request: Advanced Detailed Logging

Description:
Requesting an option for [Advanced Detailed Logging] to enhance the system's logging capabilities for device connectivity and remote session events. This feature would provide deeper insights and traceability, particularly for actions that are currently logged only when specific alerts are enabled.

Key Features:

Device Connectivity Logging:
    Log [disconnection] and [re-connection] events for all devices, regardless of whether alerts for these events are enabled.
    Include timestamps and device identifiers to accurately track offline and online durations.

Remote Session Logging:
    Disconnection Events: Log when a [remote session ends], capturing details about the session duration.
    Session Type: Log the type of remote session:
        [Take Control]
        [Remote Background]

    Idle Timeout Auto-Disconnect:
        Introduce an optional feature to automatically terminate remote sessions after a specified period of inactivity (e.g., 15, 30, or 60 minutes).
        
Enhanced Details:
    Provide a clear distinction between user-initiated disconnections and system-triggered (e.g., auto-disconnect) disconnections.
    Include IP addresses or user identifiers (if available) associated with the session for audit purposes.

Optional Settings for Advanced Logging:
    Allow administrators to toggle Advanced Detailed Logging on or off per site, client, or globally.
    Include filters to specify which event types are logged (e.g., device disconnections, session auto-disconnects, or specific session types).

Benefits:

Enhanced Auditability:
    Provides comprehensive logs for compliance and troubleshooting.
    Tracks exact periods of device downtime and remote session usage.

Improved Security:
    Automatically terminate idle sessions to reduce unauthorized access risks.
    Maintain detailed logs for session activity for forensic purposes.

Operational Efficiency:
    Enables better monitoring of device and session uptime/downtime.
    Offers clear insights into inactive session trends to optimize resource usage.

This feature would significantly enhance the system's logging capabilities, making it a more powerful tool for administrators and auditors. Please consider this addition to improve traceability and operational oversight.

@P6g9YHK6
Copy link

P6g9YHK6 commented Dec 6, 2024

i love this chatgpt non sense issue :)

anyway all the points are either already there in the audit tab or not a trmm thing

except "Device Connectivity Logging" where it would be nice to see a graph/log of all the connections events to the rmm by the agent

"Remote Session Logging:" already in place
"Idle Timeout Auto-Disconnect:" it's a mesh central thing
"Enhanced Details:" already in place would need more details if anything is missing

"Optional Settings for Advanced Logging:" you can customise the audit report already.

@NavCC
Copy link
Author

NavCC commented Dec 6, 2024

GPT well, lol :)

"Remote Session Logging:" already in place - both [take control] and [remote background] - [connect] and [disconnect]?
"Idle Timeout Auto-Disconnect:" it's a mesh central thing - i'll dive in..
"Enhanced Details:" already in place would need more details if anything is missing

"Optional Settings for Advanced Logging:" you can customise the audit report already. - Can you point me in a direction / url? This might negate the need for anything else.

@P6g9YHK6
Copy link

P6g9YHK6 commented Dec 6, 2024

there is no the disconnect logs

image

some stuff is missing but they are aware of it
#2080 (comment)

don't hesitate to say what you think is missing in a more constructive way rather than a chat gpt generated issue 👯

@NavCC
Copy link
Author

NavCC commented Dec 8, 2024

Oh, well that is what i was asking for in the feature request. [Type of connection (Take control or Remote Background)] and [Disconnect of session - which could be created when the remote window is closed manually or automatically with idle timeouts], which apparently are in Mesh so i need to find that. Additionally, was after disconnect and reconnect audits so i can report overall uptime per agent. I've turned on Alerts for this but don't really need alerts, just audits.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants