SPCM web service audit log CDR

The Web Service Audit Log is a type of CDR that records access to the SPCM web service endpoints. The following formats are supported:

  • REQUEST logs each request received.

  • AUTHENTICATION logs the authentication information for the user.

The log file is found at /tango/logs/spcm/spcm-rest-ws-audit.log.

Subsections include:

Request Log

Field Name Description

1

Audit Type

The type of audit log. This is REQUEST for the request log.

2

Date

The date of the web service request. Format:`DD/MM/YYYY`.

3

Time

The time of the web service request. Format: hh:mm:ss.

4

Tenant ID

Alphanumeric string that displays the ID of the network operator for which the CDR was produced.

5

ID

The unique ID that links REQUEST and AUTHENTICATION audit log entires.

6

IP Address

The IP address from where the request originated.

This is http <x>-FORWARDED-FOR if it exists on the request.

7

HTTP Method

The http method.

options
  • GET

  • PUT

  • POST

  • DELETE

8

URL

The web service endpoint that is being accessed.

9

User

The user specified in the HTTP basic authorisation header.

10

SPCM Tango User

This is an HTTP header that is used to identify the originating subscriber if the request comes through the USSD channel.

This is used by the Groups API to grant appropriate access to a subscriber based on group membership.
Requests from 3rd party clients can set this field to the following.
*

11

Custom Header

Contains the value of the optional header that can be set on the HTTP request.

Authentication Log

Field Name Description

1

Audit Type

The type of audit log. This is AUTHENTICATION for the authentication log.

2

Date

The date of the web service request. Format:`DD/MM/YYYY`.

3

Time

The time of the web service request. Format: hh:mm:ss.

4

Tenant ID

Alphanumeric string that displays the ID of the network operator for which the CDR was produced.

5

ID

The unique ID that links REQUEST and AUTHENTICATION audit log entires.

6

IP Address

The IP address from where the request originated.

This is http <x>-FORWARDED-FOR if it exists on the request.

7

User

The user specified in the HTTP basic authorisation header.

8

Security Enabled

Flag that indicates if authentication is enabled.

values
  • 0 = disabled

  • 1 = enabled

9

Authenticated

Flag that indicates if a user has been authenticated or not.

values
  • 0 = user not authenticated

  • 1 = user authenticated

Web Service Audit Log CDR Samples

Request Sample
REQUEST,15/03/2016,16:10:26,VodafoneID,86,127.0.0.1,GET,/spcm-restws/pcc/spcm/subscribers/0871234567/plans/55262/usage,joe,*,
Authentication Sample
AUTHENTICATION,15/03/2016,16:10:26,VodafoneIE,86,joe,0,0