1
Location of Audit Logs in Windows Server
Question asked by Dinie Rosli - 10/24/2022 at 8:26 PM
Answered
Hi. I've been tasked to find the audit logs for smartermail for auditing purposes and a project. The information I need is just limited to who logs in/out of the smartermail app and if the login is successful/failure. 
Is there a path/location where the audit log lies in a Windows Server? Or do I have to manually extract such logs from the admin account using the smartermail GUI? If so, is there any way to use API to extract the audit logs into a path such as C:\Program Files (x86)\SmarterTools\SmarterMail/Logs? 

4 Replies

Reply to Thread
1
Sébastien Riccio Replied
Hi,

I think the closest log you're looking for is the Administrative log that you can find in your log directory or from the log viewer in the "Troubleshooting" section when you're logged as admin in the web UI.

It contains login attemps (success or failed for SMTP, POP, IMAP, WEB, etc)

Maybe you have to set it to "Detailed" level, I'm not 100% sure though, maybe "Normal" is sufficient.




Sébastien Riccio System & Network Admin https://swisscenter.com
0
Dinie Rosli Replied
Hi,

Thanks a lot Sebastien. The second part regarding the web admin UI does help a lot since I realized it was set to disabled. I've put it in Normal for now. However, I have a somewhat newbie question, where exactly is the default location of the Administrative log? Is that related to the Administrative events in event viewer? 
2
Sébastien Riccio Replied
Marked As Answer
Hi,

The logs are located in the path defined here:

Sébastien Riccio System & Network Admin https://swisscenter.com
1
Tony Scholz Replied
Employee Post
Hello, 

Sébastien is correct that the logs are stored at this location. There are two other location that some logs are stored ( Autodiscover, SignalR, .. ) can be found in the MRS folder. 

C:\Program Files (x86)\SmarterTools\SmarterMail\MRS\App_Data\Logs

And the service start/stop log

C:\Program Files (x86)\SmarterTools\SmarterMail\Service\Settings\Logs

Thank you
Tony Scholz System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com

Reply to Thread