How to view the logs, when a user is added to an access group
We are looking to understand how we can view in the logs, when a user is added to an access group in PRPC.
What log file are they stored in, PegaRules-ALERT.log? Or somewhere else? What logger would we have to turn up to see this?
My goal is to be able to get these logs in Splunk, so we can generate an alert whenever a user is added to the system. This is for audit/risk purposes.
There is a Security Event log that will indicate whenever an Operator ID is updated, but not with a specific list of changes. There is also a method for developers to add custom events to this log:
https://community.pega.com/sites/default/files/help_v84/procomhelpmain.htm?target=popup&portalThreadName=STANDARD&portalName=Developer#security/auditing/sec-add-custom-sec-event-log-tsk.htm#Adding_a_custom_security_event