Description

Administrators may periodically need to track or verify users logging into the eDiscovery Platform UI.

Prior to eDiscovery version 8.2 there is no report to provide this information, however, you can manually gather this information from the server logs.

Path to locate server logs: D:\CW\\logs

• Locate and open 'server.(yyyy-mm-dd).log' for the desired date.

When a user logs into the Clearwell UI (a session is created for a particular user), this is noted in the server log and can be easily found by searching for  the phrase (without quotes), "created for user".

This will produce hits in the server log that look like the following example log entry:

2014-05-16 13:10:25,743 INFO [ui.util.HttpSessionTracker] (http-bio-80-exec-3 Session C1392BC79316BFAFFFAA2035589DF3EB created for user superuser.

Likewise, a user's log out time can be found by searching the same log for the phrase (without quotes), "about to be destroyed for".  The timestamp on this entry is either the time the user performed a clean logout or when the system expired the session after the user closed the web browser UI.

This will produce hits in the server log that look like this example:

2014-07-24 13:25:55,109 INFO  [ui.util.HttpSessionTracker] (http-bio-80-exec-10:) Session 276967129 ( 7B01CF625FEEC4B7B31A29DB5A8A3FD0) about to be destroyed for superuser

AS OF 8.2 of eDiscovery Platform (Clearwell) - Login and Logout times are available in the user interface. Select a case and navigate to Activity Reports in the Case Home menu.