IntroductionPrivateServer logs three types of security events that can be accessed trough a read-only SQL view: - auditing events: users of administration console can change (insert/update/delete) configuration objects. Their actions are logged.
- authentication events: administration services are provided only to authenticated users. Login and logout (successful or not) are logged.
- SIP sessions: VoIP clients are always connected to PrivateServer and periodically register to SIP server. Activity related to stay always connected is logged
These informations are viewable through administration console and could also be exported through read-only SQL views. Auditing events View: V_AUDIT_EVENT Field | Type | Description | id | bigint(20) | PK - autoincrement | date_created | datetime | event timestamp | event_type | varchar(255) | type of object change | actor | varchar(255) | user’s login | class_name | varchar(255) | type of object changed | object_id | varchar(255) | ID of changed object |
Authentication eventsView: V_AUTH_EVENT Field | Type | Description | id | bigint(20) | PK - autoincrement | date_created | datetime | event timestamp | event_type | varchar(255) | login/logout/login failed | ip_address | varchar(255) | IP address of remote client | principal | varchar(255) | username used for authentication event |
SIP sessionsView: V_SIP_SESSION Field | Type | Description | id | bigint(20) | PK - autincrement | date_created | datetime | event timestamp | event_type | varchar(10) | type of network event | username | varchar(80) | SIP peername | useragent | varchar(255) | SIP useragent when applicable | remoteaddr | varchar(150) | IP and port of client | tlscipher | varchar(100) | Negotiated TLS cipher cuite |
Call Detail RecordView: V_CDR Field | Type | Description | id | bigint(20) | PK - autincrement | calldate | datetime | event timestamp | src | varchar(80) | caller number | src_user_agent | varchar(80) | caller useragent | dst | varchar(80) | called number | dst_user_agent | varchar(80) | called useragent | duration | int(11) | call duration (counting from dialing) | billsec | int(11) | call duration (counting from answer) |
|