User actions in logs - where?

Nagios
1

Hello.

I have SLES SP2 and Nagios 3.2.0 installed on it.
In /var/log/messages I can see something like this:

Jun 2 10:52:22 NAGIOS nagios: EXTERNAL COMMAND: DISABLE_HOST_NOTIFICATIONS;GWclus2

And in /var/log/apache2/access_log I can only see who connected to the nagios web interface.
So, I can’t see who exactly disabled the notifications. I wonder, where can I see which user issues external commands?

Thanks in advance.
Peter

2

the apache logs should have the Source IP address at that time… :slight_smile: