How to Identify Which User Added Groups

Published: 13 Nov 2014
Last Modified Date: 19 Jan 2019


How to identify which user added groups


Tableau Server


If the Application Server (wgserver) logs still exist from the time the groups were created, it should be possible to find the user who added the groups.


  1. Create a bundle by following the steps mentioned in Creating Tableau Server Log Files.
  2. Unzip the file
  3. Navigate to the wgserver folder and search the files for the group names. The file names including the events of interest will be named something like "production.8001_2014_11_13....log". Using a text editor such as Sublime or Notepad++ works best as they allow you to search for a string in all files in an entire directory.


The events of interest will start with the following:

Started POST "/wg/create/groups" for ::1 at 2014-11-13 14:16:59.000 -0800


The details under the event will indicate the group name and user:

2014-11-13 14:16:59.443 -0800_level=INFO_server=  Parameters: {"group"=>"new_group_name", "authenticity_token"=>"WwmBiglLfHXFy+kLakLDt4XuoPf0vdfMlZNdHgfo+6Q="}

2014-11-13 14:16:59.711 -0800_level=INFO_server= to http://localhost/groups


In this example, new_group_name is the new group and admin is the user who added the group.


Note that if you have a distributed environment, you would need to search in the wgserver folder for each worker hosting an Application Server process which will be included in the same file. Let me know if you have any additional questions.



Did this article resolve the issue?