audit logs

4 Topics

how to change log format ofpower bi report server
Hello We are using power bi report server, together with another tool "matomo", for analysing logs generated by power bi report server. Is there a way to change the format of the logs to a specific format (e.g. like for apache logs), so as for better analysis with matomo? Thanks for your help
oliflo
1 year ago Place Report Server
933Views
0likes
2Comments
How to best perform access audit on on-premise data sources?
Objective Can we identify which users accessed which on-premise data sources? Assumptions Both PBI Service and Report Server are being used for reports. Questions 1. Seems like the audit logs for PBI Service can return "ExploreDataset" events with a "User" attribute. Does this also apply to on-premise data sources? It shouldn't matter whether the dataset is on-premise or on-cloud, right? 2. For on-prem scenarios, does either Report Server or the On-premise Gateway have logs identifying which users accessed which databases? 3. For Desktop connections, users connect directly to the databases, so access audit should be taken directly from the databases. Is that right?
Anonymous
5 years ago Place Report Server
3.9KViews
0likes
3Comments
What is the Logon Process for report server?
Greetings, all. I don't know much about SQL Server 2014, and I didn't know anything about Power BI Report Server before I was tasked with setting it all up. Now that I have it built and running, I am working on the security paperwork, to bring it to the production network (you government contractors probably recognize these - SCTM, Audit Plan). Quite a bit of this revolves around how the login process works, and how it is recorded in "audit" logs (could be any log file, just need to know where it is). So, as I currently understand the process, this is what I think happens (please feel free to correct me): a user logs into a workstation, opens a web browser, and put in the URL for the PBI Report Server (including the port # (443)). The packet gets to the NIC of the PBI RS, and gets transferred up the TCP stack to (probably) the Application layer. What application actually receives this packet - https.sys, Power BI Report Server, SQL Server 2014, something else? One of these applications then sends a packet back to the user, requesting credentials. The user types in their credentials, and sends them back to the application. If this is Power BI Report Server receiving the credentials, my guess of credential flow would be: from PowerBI RS to SQL server 2014, to the Domain Controller for verification that the credentials are valid. If valid, the DC would send back to SQL Server 2014 the group members of the user. SQL Server 2014 would then compare those groups with users and groups in its Security section; if a match is made, the user info is passed to PowerBI RS, where the username is compared to Roles, to see what access/permissions the user has. I _think_ that this would be the point where the user is "logged on". Where is that logged? I looked at all the PBI logs (C:\Program Files\Microsoft Power BI Report Server\PBIRS\Logfiles), and don't see that a user is logged in at any point (I also need to know about failed login attempts. I am _guessing_ that the SQL Server 2014 would log both successful and failed logon attempts, perhaps in the Execution3 log, but I really don't know enough about SQL Server to know. I have not been able to find any documentation that talks in-depth about the logon process, and nothing about where that would be logged. Can anyone point me in the direction of one or more documents that explains all this (of even parts)? Can someone jump in and explain it here? Thank you, Roger
Solved
Anonymous
5 years ago Place Report Server
4.3KViews
0likes
4Comments
Advanced User Auditing
Hey all - I know I can get who executed a dashboard / report from the ExecutionLogStorage or corresponding views, but is there a way to dig a bit deeper? An example would be a multi-page report. How can I tell if a user who accessed the dashboard viewed other pages? Any assistance is appreciated! -Also - It would be amazing to see some form of detailed modern documention on the ReportServer DB.
Anonymous
6 years ago Place Report Server
670Views
0likes
1Comment