Author Topic: Genesys CME: Audit Trails  (Read 393 times)

Offline sanjay arya

  • Newbie
  • *
  • Posts: 2
  • Karma: 0
Genesys CME: Audit Trails
« on: June 25, 2018, 07:48:11 PM »
Hello Guys,

I was wondering if someone could help....
I am trying to trace someone that has been fraudulently using someone else's CME login to change their own call taking skills!!

Someone has found out the login details and changed their own skills, but I need to prove it was them by tracing either the BASE UNIT (Hard drive) or Windows login.....

Not sure if CME has this data somewhere in the background, or if its a job for the IS Security Team to try and find out.

Offline genesysguru

  • Full Member
  • ***
  • Posts: 244
  • Karma: 11
    • Genesys Guru Blog
Re: Genesys CME: Audit Trails
« Reply #1 on: June 25, 2018, 08:51:01 PM »
Do you know when the change was made? Do you have confserv logs?

Marked as best answer by victor on July 03, 2018, 09:01:54 PM

Offline cavagnaro

  • Administrator
  • Hero Member
  • *****
  • Posts: 6940
  • Karma: 56331
Re: Genesys CME: Audit Trails
« Reply #2 on: June 25, 2018, 10:32:25 PM »
on confServer logs you will find the client IP Address so that may help

Offline sanjay arya

  • Newbie
  • *
  • Posts: 2
  • Karma: 0
Re: Genesys CME: Audit Trails
« Reply #3 on: June 26, 2018, 12:00:41 AM »
Brilliant thank you guys......I don't have access to the Config Logs, but know the team that do.
If it shows the IP Address then that will be sufficient for the appropriate action to be taken
 :)>

Offline jarrod

  • Newbie
  • *
  • Posts: 34
  • Karma: 0
    • InProd CMS
Re: Genesys CME: Audit Trails
« Reply #4 on: July 03, 2018, 11:16:50 AM »
You can get the IP address from the message server log as well if it is configured correctly. One more place to look.

Warning, shameless plug ahead!
You might want to consider an auditing tool such as InProd which records this data. https://www.inprod.io

InProd is a DevOps, auditing, configuration management and license reporting solution for Genesys PureEngage. Learn how to speed up deployments by creating reusable changes  www.inprod.io

Offline victor

  • Administrator
  • Hero Member
  • *****
  • Posts: 1398
  • Karma: 17
Re: Genesys CME: Audit Trails
« Reply #5 on: July 03, 2018, 12:02:56 PM »
You can get the IP address from the message server log as well if it is configured correctly. One more place to look.

Warning, shameless plug ahead!
You might want to consider an auditing tool such as InProd which records this data. https://www.inprod.io

It is ok, this is exactly when a tool like this would be useful :)