New idea

REST API to Retrieve Systemwide Logins

Apologies if this has been requested separately. There is no REST API call to retrieve the Sys Admin login report  It would be very useful to have such a call.

Mark Salamon

  • We built a database of all our sites, all the users in the sites, and the last login date for each user/site combination. Then we built an application that loops through all of our sites on a nightly basis and checks the last login date for each user on the site and, if it differs from what was previously in the database, adds it to the database. We built it to be able to provide rough daily usage metrics, but it sounds like it'd probably help you issue spot specific issues like this. Then, should an issue be spotted, you could drill into the individual site's data for more detailed information about what the user did while logged into the site. (One caveat, this solution doesn't record activity of System Admins who aren't otherwise Members of the site. It just doesn't "see" them at all.)

  •

    Imran Aziz / Peter Busse - per our discussion yesterday

  •

    We'd be very interested in System Reports APIs to help us generate usage data. I think this would interest others too, as I understand a few clients are currently relying on HighQ to prepare monthly reports.

  •

    Jimmy Zhou 

  •

    Following up on my post for a bit more context. Our IT/Security team would like access to login and activity information across all users, if the need arises. For example, if a user's credentials were compromised, to determine if there was activity by that user during the compromise period, not just did the user login t Collaborate, but what sites they accessed and what content in those sites.

    We can get the login information from the systemwide login report -- albeit manually. But there may not be an easy way to determine what sites the user actually access or the content in those sites, for 2 reasons:

    1 - The user might have access to a large number of sites. It appears that we would manually pull the reports for every site the user has access to in order to determine if the user logged in during the compromise period. (If so, then pull additional audits of site activity by that user.)

    2 - If the user had enhanced rights to any site, they could have accessed a site and then removed themselves from the site, making it difficult to determine which sites to check for that user.

    It would be helpful if there were a single audit point where we could plug in a user's ID and determine all of their logged activity: login to Collaborate, login to site1, viewed documentA, etc.

    Does anyone have a solution to this, especially as there appear to be no REST calls for systemwide or site-level reports/audits?