Orchestrator Audit/Events logs

[wilbardmtei]

Hi,

I’m attempting to integrate Orchestrator with ArkSight (Security: Logs management system) as one of our requirements in our company. Integration is done through Ms SQL Server queries and I’m having two issues.

1. Logs date are still in UCT 00:00 although I have set in Orchestrtor settings to UCT +03:00,
   I have found a work around but I would love to have a permanent fix for this.

SELECT
          [Id]
         ,[UserName]
         ,DATEADD(hh, 3,[LastLoginTime]) AT TIME ZONE 'E. Africa Standard Time'  AS LastLoginTime /* LOGIN */
         ,DATEADD(hh, 3,[LastModificationTime]) AT TIME ZONE 'E. Africa Standard Time'  AS LastModificationTime /* LOGOUT */
FROM [UiPath].[dbo].[Users]

2. Users table overwrites instead of adding record (i.e Updates instead of Insert) in case of use login/logout it is a challenge to obtain previous logs. Is there a place in web.config file or ASP.NET file I can change this, and is it legal to change?

[wilbardmtei]

@codemonkee kindly assist.

[wilbardmtei]

UPDATES:

I have found a way to get proper logs for login/logou but still showing time at UCT +00:00 is the a way to fix time other than in the Orchestrator dashboard?

Login sample:

2020-03-27 15:47:37 10.10.2.19 GET /Account/ExternalLoginCallback ReturnUrl=%2F&mayRegisterTenant=False 443 XXdomain\XXuser 10.12.52.192 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/80.0.3987.132+Safari/537.36 - 302 0 0 156

Logout sample:

2020-03-27 15:48:58 10.10.2.19 GET /account/logout - 443 XXuser 10.12.52.192 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/80.0.3987.132+Safari/537.36 - 302 0 0 109