1. Introduction
PrivateServer logs three types of security events that can be accessed trough a read-only SQL view:
- auditing events: users of administration console can change (insert/update/delete) configuration objects. Their actions are logged.
- authentication events: administration services are provided only to authenticated users. Login and logout (successful or not) are logged.
- SIP sessions: VoIP clients are always connected to PrivateServer and periodically register to SIP server. Activity related to stay always connected is logged
These informations are viewable through administration console and could also be exported through read-only SQL views.
2. Auditing events
View: V_AUDIT_EVENT
Field | Type | Description |
id | bigint(20) | PK - autoincrement |
date_created | datetime | event timestamp |
event_type | varchar(255) | type of object change |
actor | varchar(255) | user’s login |
class_name | varchar(255) | type of object changed |
object_id | varchar(255) | ID of changed object |
3. Authentication events
View: V_AUTH_EVENT
Field | Type | Description |
id | bigint(20) | PK - autoincrement |
date_created | datetime | event timestamp |
event_type | varchar(255) | login/logout/login failed |
ip_address | varchar(255) | IP address of remote client |
principal | varchar(255) | username used for authentication event |
4. SIP sessions
View: V_SIP_SESSION
Field | Type | Description |
id | bigint(20) | PK - autincrement |
date_created | datetime | event timestamp |
event_type | varchar(10) | type of network event |
username | varchar(80) | SIP peername |
useragent | varchar(255) | SIP useragent when applicable |
remoteaddr | varchar(150) | IP and port of client |
tlscipher | varchar(100) | Negotiated TLS cipher cuite |
5. Call Detail Record
View: V_CDR
Field | Type | Description |
id | bigint(20) | PK - autincrement |
calldate | datetime | event timestamp |
src | varchar(80) | caller number |
src_user_agent | varchar(80) | caller useragent |
dst | varchar(80) | called number |
dst_user_agent | varchar(80) | called useragent |
duration | int(11) | call duration (counting from dialing) |
billsec | int(11) | call duration (counting from answer) |