JavaEE application security auditing

Question

I need to produce a security audit report of a Servlet/EJB based application deployed to WebSphere 8.5. The report must include user login, authentication time, logout time and the ip address.

The solution so far is to parse WebSphere security audit logs and interpret them into a report. The problem with this approach is that WebSphere produces copious amounts of security audit records which are not easy to analyze.

Is there a better way to get basic security audit information for a JavaEE application?

Answer 1

You can parse the audit logs produced through use of the wsadmin binaryAuditReader CLI, which allows you to produce an html formatted file of only those attributes and events that you find of interest. Detailed information on how to use the CLI can be found here .