KNOWLEDGE BASE

How to Identify Which User Added Groups


Published: 13 Nov 2014
Last Modified Date: 28 Feb 2017

Question

How to identify which user added groups

Environment

Tableau Server

Answer

If the Application Server (wgserver) logs still exist from the time the groups were created, it should be possible to find the user who added the groups.

 

  1. Create a logs.zip bundle by following the steps mentioned in Creating Tableau Server Log Files.
  2. Unzip the file
  3. Navigate to the wgserver folder and search the files for the group names. The file names including the events of interest will be named something like "production.8001_2014_11_13....log". Using a text editor such as Sublime or Notepad++ works best as they allow you to search for a string in all files in an entire directory.

 

The events of interest will start with the following:

Started POST "/wg/create/groups" for ::1 at 2014-11-13 14:16:59.000 -0800

 

The details under the event will indicate the group name and user:

2014-11-13 14:16:59.443 -0800_level=INFO_server=10.12.34.56:tabserv_service=WEB-INF:0_pid=8688_tid=0x4e7fd7f5_site=_user=_session=_request=_context=groups_message=  Parameters: {"group"=>"new_group_name", "authenticity_token"=>"WwmBiglLfHXFy+kLakLDt4XuoPf0vdfMlZNdHgfo+6Q="}

2014-11-13 14:16:59.711 -0800_level=INFO_server=10.12.34.56:tabserv_service=WEB-INF:0_pid=8688_tid=0x4e7fd7f5_site=Default_user=admin_session=_request=VGUt2wocAz4AACmsYpwAAAHo_context=groups.create_message=Redirected to http://localhost/groups

 

In this example, new_group_name is the new group and admin is the user who added the group.

 

Note that if you have a distributed environment, you would need to search in the wgserver folder for each worker hosting an Application Server process which will be included in the same logs.zip file. Let me know if you have any additional questions.

 

Cheers!

Did this article resolve the issue?