SSH Session Logging

is there anyway to turn on global SSH session logging?
as in log exactly what is being done by any logged in SSH user? i know there are log levels for SSH in ssh_config but short of trying each level out i didn't see mention of a level that explicitly logged full sessions.
how about per user? i suppose i do only use 1-2 users.
thanks!

Can you clarify a bit what you would like done? Do you want to log connections, logins and logouts or do you want to log SSH session activity i.e. commands are entered and what not? If its the latter you will not be able to do that will syslog. You may want to look into system accounting. For more on system accounting man "accton", "sa", "lastcomm". If you are just looking for logins and logouts the last command should point you in the right direction.
Hope that helps!
- Barrett

Similar Messages

  • SSH session output logging

    I use the ssh built into terminal to access a lot of devices. I'd like to be able to pass an option or setup the config file for ssh to log the output of those sessions to a file that is named by that devices IP address and date/time stamp. It looks like OSX uses openssh to do this, but I've been looking here for a bit to find out how to pass those options to the system. I would think this would be a pretty basic option either for terminal.app or for openssh. Has anyone done this successfully. I need to use this for CYA when performing maintenance on these devices so I can prove exactly what work was performed or to go back at a later time and look at the output.

    You'd probably want to repost your question in the Unix discussions:
    http://discussions.apple.com/forum.jspa?forumID=735

  • Logging all SSH sessions? (Package to do it?)

    heya,
    I was wondering if there was a foolproof way of logging all commands executed via SSH? (i.e. logging all remote SSH sessions).
    I know you can do it manually via "script", or replacing the login shell, but I was hoping for perhaps a program/service, that did it automatically. (Just like how etckeeper managers all your configuration files).
    Also, I'd need it to work with all logins, including password-based ones as well.
    Cheers,
    Victor

    On Solaris, you would probably use BSM.  A search on google for "bsm linux" reveals some alternatives for Linux which you could try.

  • Can I set idle ssh sessions to be logged out?

    I'd like to log off ssh sessions that have been idle for too long, but I am unsure where to set this. would it be TMOUT in /etc/profiles or in each user's shell profiles?

    First of all i guess its useful to mention that there are no idle timeout in ssh itself, so you would indeed have to solve it in another way.
    You could set the TMOUT variable in the /etc/profile, there are two problems here however;
    1) not all shell implements it (bash, ksh, zsh does)
    2) the user can easily change / remove it.
    For tcsh i belive the syntax would be set autologout=xx .
    I belive there are small deamons around which logs out users for you if they idle for to long, but i can't find anything among my bookmarks.
    If you have a firewall perhaps you could probably make it do this for you as well.

  • Screen Sharing and SSH sessions freeze occasionally on multiple mac minis

    I have 28 Mac Minis at work. With such a large number of minis, I obviously can't have a monitor attached to each of them so I've got them plugged into a network switch and access them via Screen Sharing (both via regular Screen Sharing and ARD) and SSH sessions.
    A few of them seem to suffer from intermittent problems however. I'll be using Screen Sharing when the session freezes. It may unfreeze eventually, but I can also usually just quit out and re-connect and it will be unfrozen. The same thing happens when I'm connected via SSH, it will freeze and I won't be able to type in any more commands.
    I need help troubleshooting (or if anyone knows what could be causing this, that'd be cool too).
    I've tried connecting from both a Mac Pro on the wired network and a MacBook Pro on the wireless network. The freezing seems to only happen on certain Mac Minis as well.
    I've tried switching network cables from a Mac Mini that doesn't suffer from this problem with one that does and nothing changed.
    I also thought it might be a bandwidth issue at first, despite being a gigabit switch connected via cat6 to the rest of our gigabit network, but even when no significant bandwidth is being used, the freezing still occurs.
    One more thing I want to test is the connection between the switch all these Mac Minis is plugged into and one of the other switches that all our other network traffic goes through. I didn't set it up myself so I fear that it might be an old, damaged cable or something. Failing that, I have no idea what the problem could be, which is why I'm posting here.
    So, does anyone have any idea what the problem could be? Or any other ideas for troubleshooting the problem? Thanks.
    (They're all running 10.6.8, and range from Mid-2007 to 2009 models).

    It would be in the system log. However, the next step would be to safe-boot in order to eliminate third-party system modifications. That goes for both client and server. If you can reproduce the problem in safe mode, then you probably have a network issue. Take everything offline except one client and one server, and test.

  • SSH sessions over Putty die unexpectedly & commandline entry is slow

    I have a Sun Ultra-60 running Solaris 9 at patch level 118558-05. Users of this server report that their ssh sessions over Putty to this server die unexpectedly anywhere from one to two times per week. The users are usually in a vim session at the time editing php files for the website hosted on the system. Another problem reported is that the user's command line input slows dramatically and they must wait for the server to complete the line they were typing prior to proceeding.
    I cannot find the source of this problem. To date, the following is what I have tried in my troubleshooting efforts.
    1) ptdiag - reports no hardware failures
    2) /var/adm/messages - reports no issues relating to the problem mentioned above.
    3) swap -l - the server has plenty of swap and shows no need for additional swap space Here is the output from swap -l
    swapfile dev swaplo blocks free
    /dev/vx/dsk/swapvol 213,6 16 8389632 8358176
    I should also mention that /tmp is not full and is currently only at 2% of it's capacity.
    4) ndd shows that the link speed, duplex, etc. are correct at 100Mbps full-duplex.
    5) System uptime is at 337 days and the uptime command currently shows the following load: load average: 0.12, 0.11, 0.09
    6) vxdisk list shows the two internal mirrored disks as being online and no errors. iostat -En shows no soft or hard errors on the two disks
    7) This server only has two users and the main applications in use are mysql and apache.
    8) I have upgraded to the latest version of the vim editor and the problem still persists. I have also had the users upgrade to the latest version of Putty and to turn on the logging feature of Putty which hasn't revealed any information as to why the sessions are unexpectedly terminating.
    9) I have checked the /etc/default/login setting for the "TIMEOUT" variable which is commented out. I also checked the users profiles and verified that there are no timeout variables defined.
    10) Here is my netstat -i output:
    Name Mtu Net/Dest Address Ipkts Ierrs Opkts Oerrs Collis Queue
    lo0 8232 loopback localhost 52375982 0 52375982 0 0 0
    qfe0 1500 servername servername 2319804623 29884 1493848177 0 0 0
    qfe1 1500 servernamea servernamea 231550668 0 3694 0 0 0
    qfe2 1500 servernameb servernameb 40944152 1 65630146 0 0 0
    Some of these numbers look high, but I don't see any collisions.
    Any help would be appreciated. If additional commands need to be run, please advise and I will gladly post.
    Thanks much for any assistance.

    Hi Darren,
    The user's vim session dies when the users are actively typing.
    As for there being a firewall or NAT device between the workstation and the server, yes, there is. The users are in one building and the server is housed in a datacenter in a separate building. The users do not have this issue with out other Solaris 8 and Solaris 10 servers...only this one particular server. A traceroute to the server takes only 5 hops and returns quickly.
    As for the logs, I just checked /var/adm/messages and it is reporting the following types of messages over and over.:
    [ID 317013 daemon.notice] bpcd[11746] from some IP
    I think these messages are generated from Veritas Netbackup which is administered by a separate team than what I am on, but I can have them investigate.

  • Error from the session log between Informatica and SAP BI

    HI friends,
          I am working extraction from bi by Informatica 8.6.1.
          now, I start the process Chain from bi, and I got a error from Informatica's session log.Pls help me to figure out what's going on during me execution.
    Severity     Timestamp     Node     Thread     Message Code     Message
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6228     Writing session output to log file [D:\Informatica\PowerCenter8.6.1\server\infa_shared\SessLogs\s_taorh.log].
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6014     Initializing session [s_taorh] at [Fri Dec 17 11:01:31 2010].
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6683     Repository Name: [RepService_dcinfa01]
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6684     Server Name: [IntService_dcinfa01]
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6686     Folder: [xzTraining]
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6685     Workflow: [wf_taorh] Run Instance Name: [] Run Id: [43]
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6101     Mapping name: m_taorh.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6964     Date format for the Session is [MM/DD/YYYY HH24:MI:SS.US]
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     TM_6703     Session [s_taorh] is run by 32-bit Integration Service  [node01_dcinfa01], version [8.6.1], build [1218].
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MANAGER     PETL_24058     Running Partition Group [1].
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MANAGER     PETL_24000     Parallel Pipeline Engine initializing.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MANAGER     PETL_24001     Parallel Pipeline Engine running.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MANAGER     PETL_24003     Initializing session run.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     CMN_1569     Server Mode: [UNICODE]
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     CMN_1570     Server Code page: [MS Windows Simplified Chinese, superset of GB 2312-80, EUC encoding]
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     TM_6151     The session sort order is [Binary].
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     TM_6156     Using low precision processing.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     TM_6180     Deadlock retry logic will not be implemented.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     SDKS_38029     Loaded plug-in 300320: [PowerExchange for SAP BW - OHS reader plugin 8.6.1 build 183].
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     SDKS_38024     Plug-in 300320 initialization complete.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     PCCL_97003     [WARNING] Real-time session is not enabled for source [AMGDSQ_IS_TAORH]. Real-time Flush Latency value must be 1 or higher for a session to run in real time.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     SDKS_38016     Reader SDK plug-in intialization complete.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     TM_6307     DTM error log disabled.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     TE_7022     TShmWriter: Initialized
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     TM_6007     DTM initialized successfully for session [s_taorh]
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     PETL_24033     All DTM Connection Info: [<NONE>].
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MANAGER     PETL_24004     PETL_24004 Starting pre-session tasks. : (Fri Dec 17 11:01:31 2010)
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MANAGER     PETL_24027     PETL_24027 Pre-session task completed successfully. : (Fri Dec 17 11:01:31 2010)
    INFO     2010-12-17 11:01:31     node01_dcinfa01     DIRECTOR     PETL_24006     Starting data movement.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     MAPPING     TM_6660     Total Buffer Pool size is 1219648 bytes and Block size is 65536 bytes.
    INFO     2010-12-17 11:01:31     node01_dcinfa01     READER_1_1_1     OHS_99013     [INFO] Partition 0: Connecting to SAP system with DESTINATION = sapbw, USER = taorh, CLIENT = 800, LANGUAGE = en
    INFO     2010-12-17 11:01:32     node01_dcinfa01     READER_1_1_1     OHS_99016     [INFO] Partition 0: BW extraction for Request ID [163] has started.
    Edited by: bi_tao on Dec 18, 2010 11:46 AM

    INFO     2010-12-17 11:01:33     node01_dcinfa01     WRITER_1_*_1     WRT_8167     Start loading table [VENDOR] at: Fri Dec 17 11:01:32 2010
    INFO     2010-12-17 11:01:33     node01_dcinfa01     WRITER_1_*_1     WRT_8168     End loading table [VENDOR] at: Fri Dec 17 11:01:32 2010
    INFO     2010-12-17 11:01:33     node01_dcinfa01     WRITER_1_*_1     WRT_8141     
    Commit on end-of-data  Fri Dec 17 11:01:32 2010
    ===================================================
    WRT_8036 Target: VENDOR (Instance Name: [VENDOR])
    WRT_8044 No data loaded for this target
    INFO     2010-12-17 11:01:33     node01_dcinfa01     WRITER_1_*_1     WRT_8143     
    Commit at end of Load Order Group  Fri Dec 17 11:01:32 2010
    ===================================================
    WRT_8036 Target: VENDOR (Instance Name: [VENDOR])
    WRT_8044 No data loaded for this target
    INFO     2010-12-17 11:01:33     node01_dcinfa01     WRITER_1_*_1     WRT_8035     Load complete time: Fri Dec 17 11:01:32 2010
    LOAD SUMMARY
    ============
    WRT_8036 Target: VENDOR (Instance Name: [VENDOR])
    WRT_8044 No data loaded for this target
    INFO     2010-12-17 11:01:33     node01_dcinfa01     WRITER_1_*_1     WRT_8043     ****END LOAD SESSION****
    INFO     2010-12-17 11:01:33     node01_dcinfa01     WRITER_1_*_1     WRT_8006     Writer run completed.
    INFO     2010-12-17 11:01:33     node01_dcinfa01     MANAGER     PETL_24031     
    RUN INFO FOR TGT LOAD ORDER GROUP [1], CONCURRENT SET [1] *****
    Thread [READER_1_1_1] created for [the read stage] of partition point [AMGDSQ_IS_TAORH] has completed. The total run time was insufficient for any meaningful statistics.
    Thread [TRANSF_1_1_1] created for [the transformation stage] of partition point [AMGDSQ_IS_TAORH] has completed. The total run time was insufficient for any meaningful statistics.
    Thread [WRITER_1_*_1] created for [the write stage] of partition point [VENDOR] has completed. The total run time was insufficient for any meaningful statistics.
    INFO     2010-12-17 11:01:33     node01_dcinfa01     MANAGER     PETL_24005     PETL_24005 Starting post-session tasks. : (Fri Dec 17 11:01:33 2010)
    INFO     2010-12-17 11:01:33     node01_dcinfa01     MANAGER     PETL_24029     PETL_24029 Post-session task completed successfully. : (Fri Dec 17 11:01:33 2010)
    INFO     2010-12-17 11:01:33     node01_dcinfa01     MAPPING     SDKS_38025     Plug-in 300320 deinitialized and unloaded with status [-1].
    INFO     2010-12-17 11:01:33     node01_dcinfa01     MAPPING     SDKS_38018     Reader SDK plug-ins deinitialized with status [-1].
    INFO     2010-12-17 11:01:33     node01_dcinfa01     MAPPING     TM_6018     The session completed with [0] row transformation errors.
    INFO     2010-12-17 11:01:33     node01_dcinfa01     MANAGER     PETL_24002     Parallel Pipeline Engine finished.
    INFO     2010-12-17 11:01:33     node01_dcinfa01     DIRECTOR     PETL_24013     Session run completed with failure.
    INFO     2010-12-17 11:01:34     node01_dcinfa01     DIRECTOR     TM_6022     
    SESSION LOAD SUMMARY
    ================================================
    INFO     2010-12-17 11:01:34     node01_dcinfa01     DIRECTOR     TM_6252     Source Load Summary.
    INFO     2010-12-17 11:01:34     node01_dcinfa01     DIRECTOR     CMN_1537     Table: [AMGDSQ_IS_TAORH] (Instance Name: [AMGDSQ_IS_TAORH]) with group id[1] with view name [Group1]
          Rows Output [0], Rows Affected [0], Rows Applied [0], Rows Rejected[0]
    INFO     2010-12-17 11:01:34     node01_dcinfa01     DIRECTOR     TM_6253     Target Load Summary.
    INFO     2010-12-17 11:01:34     node01_dcinfa01     DIRECTOR     CMN_1740     Table: [VENDOR] (Instance Name: [VENDOR])
          Output Rows [0], Affected Rows [0], Applied Rows [0], Rejected Rows [0]
    INFO     2010-12-17 11:01:34     node01_dcinfa01     DIRECTOR     TM_6023     
    ===================================================
    INFO     2010-12-17 11:01:34     node01_dcinfa01     DIRECTOR     TM_6020     Session [s_taorh] completed at [Fri Dec 17 11:01:33 2010].

  • ACE 4710. Unable to clear ssh sessions

    Hi.
    Once in the CLI of an ACE 4710, using the command "clear ssh session id" I am unable to clear/kill any of the remote ssh sessions established.
    According to the administration guide, the "clear ssh .." command must clear the sessions, but it does not, or maybe I am missing something?
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/administration/guide/access.html#wp1050335
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Tabla normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
    mso-para-margin:0cm;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:11.0pt;
    font-family:"Calibri","sans-serif";
    mso-ascii-font-family:Calibri;
    mso-ascii-theme-font:minor-latin;
    mso-fareast-font-family:"Times New Roman";
    mso-fareast-theme-font:minor-fareast;
    mso-hansi-font-family:Calibri;
    mso-hansi-theme-font:minor-latin;}
    ACE/CONTEXTO_A# show ssh session-info
    Session ID     Remote Host         Active Time
    13728          222.98.54.158:50556   67:43:38
    13732          200.44.158.70:46172   67:43:36
    13735          200.44.158.70:46174   67:43:36
    13737          200.44.158.70:46177   67:43:36
    ACE/CONTEXTO_A#
    ACE/CONTEXTO_A# clear ssh 13728
    ACE/CONTEXTO_A# clear ssh 13732
    ACE/CONTEXTO_A# clear ssh 13735
    ACE/CONTEXTO_A# clear ssh 13737
    ACE/CONTEXTO_A# show ssh session-info
    Session ID     Remote Host         Active Time
    13728          222.98.54.158:50556   67:43:54
    13732          200.44.158.70:46172   67:43:52
    13735          200.44.158.70:46174   67:43:52
    13737          200.44.158.70:46177   67:43:52

    Hello,
    Seems to be working for me in my tests.  Works in the Admin context and a user context, and when clearing connections from console connection or one of the SSH sessions.
    ace-appliance-15/CTX1# sho ssh sess
    Session ID     Remote Host         Active Time
    24705          161.44.77.245:1586     0: 1:42
    25100          161.44.77.245:1589     0: 0:27
    25116          161.44.77.245:1590     0: 0:16
    ace-appliance-15/CTX1# clear ssh 25116
    ace-appliance-15/CTX1#
    ace-appliance-15/CTX1# sho ssh sess
    Session ID     Remote Host         Active Time
    24705          161.44.77.245:1586     0: 2: 5
    25100          161.44.77.245:1589     0: 0:50
    What version of software are you running on your 4710?  I am running the latest A3(2.4).  Can you try this version?
    Thanks,
    Sean

  • SQL Errors In Informatica Session Logs

    I am running a new installation of Analytics 7.9.6. No customizations have been made, and I'm trying to load data from a vanilla "Vision" instance of EBS 11.5.10. I have successfully completed loading of the Financial Analytics data warehouse tables, and have set up a new Execution Plan to load the Supply Chain/Order Management Analytics data warehouse tables.
    In loading the Supply Chain tables, however, Informatica jobs are failing for me and I'm not able to complete the initial load. In looking at the session logs, I'm discovering invalid SQL! It looks like malformed SQL is being generated (including fundamental errors like "FROM not expected"). When I try to take these SQL statements and run them SQL*Developer, I'm finding that there are indeed syntax errors. In one case, the SQL statement was that failed was a very simple Select/From/Where with correct syntax, however, the field name in the Where clause did not exist in my EBS instance. ( SDE_ORA_Project_HierarchyDimension_Stage2 - "SYS_PROGRAM_FLAG" field doesn't exist in the PA_PROJECTS_ALL source table )
    Any SC-OM veterans out there with thoughts on why this would be going wrong???
    Thank you!

    This seems to be related to a patchset M required on the EBS system. See the following Metalink note:
    Tasks Related To Projects Table Failed During Full Load [ID 1300293.1]
    Here are the details:
    Cause
    The Employee Expenses subject area in DAC includes several Project Dimension tasks and patchset M has not been applied to EBS 11.5.10
    Solution
    1). As documented in the Oracle Business Intelligence Applications Release Notes > section 1.3.30 Implementation of Oracle Project Analytics with Oracle eBusiness Suite 11.5.10:
    Implementation of Oracle Project Analytics with Oracle eBusiness Suite 11.5.10
    requires Family Pack M (11i.PJ_PF.M) to be applied to Oracle eBusiness Suite 11.5.10.
    2). The customer does not use OBI Project Analytics as it is not used in eBusiness at the client site.
    In this case, the recommendation is to disable the Project Dimension as documented in the Oracle Business Intelligence Applications Configuration Guide for Informatica PowerCenter Users > 6.2.1.1 How to Disable Project Dimensions

  • ACE 4710 fills up with unexplained 127.0.0.1 SSH sessions

    What could be the cause of such SSH management sessions:
    ACE/Admin# sh ssh session-info
    Session ID     Remote Host         Active Time
    21763          127.0.0.1   :11034   -347:-22: 9
    Such 127.0.0.1 originated SSH sessions are constantly filling the maximum amount of SSH management sessions (16), and block out actual remote management!

    Hello, Timo Miiluvaara,
    What is the software version ?
    If it is A3.(2.3) or earier release, and you are using SSL feature also managing the appliance via DM,
    you might hit a bug below.
    CSCtc13377
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtc13377
    Regards,
    Kim

  • Capture ssh sessions in the background

    Hi together,
    i would like to capture all ssh-session (hidden in the background) on a solaris 10 server.
    I hade some tries with /usr/bin/script -a <somewhere> in the .bash_profile but this is not what i need. e.g. "exit" exits the script and not the session.
    do you have some clever idea how to solve the issue?
    i can�t find any helpful tool.
    chears, claudius

    No, i have a System where some users get the possibility to access the server by ssh. To have a control, what the user did - and do have a verification when he did something wrong - i would like to have a possibility to see what he did within the session (e.g. editing a configfile) I had some tries with "script" and other little OS-tools but, i was�nt able to find a perfect sollution.
    Perfect meens - it�works and it is not vissible for the user.

  • How to reconnect to a disconnected remote ssh session on solaris 10

    hi all
    How to reconnect to a disconnected remote ssh session on solaris 10
    is there a way to accomplish this

    No, there's not.
    A common solution for this is to get a copy of 'screen'. After connecting via ssh (or any other protocol), you can start a "screen" session. If you get disconnected (or disconnect intentionally), you can later come back on the machine and bring your existing "screen" session back.
    Darren

  • In which table we can find the sessions log

    Hi all,
    I am using BDC using session method,I need to know the  table in which session log is getting updated, one more thing could I able to find the session log for the past one year in SM35, plz help me out.
    regards
    paul

    hi see the below table for logs in session method.
    BDCLM
    regards,

  • Wrong table is displayed in session log(10.1.3.4.1)

    Hi
    i have a interesting scenario in apps implementation.scenario is as follows
    preconditions: i enabled cache in nqsconfig.ini file
    i got the correct results in obiee answers.but when i look in session log i found that physical query itself is going to wrong database(may be it
    displayed the query earlier,session log is not updated.i click on close cursors,cleared cache,still same problem exists,some times i did not got session log( log not displayed)(evenif i put loglevel as 2 or 3 in rpd).anyone has some input
    i restarted servers also,but no use
    regards
    mervin

    Hi Mervin, Previously i had same problem.
    Someboby previously used Loglevel 5 or more on that Database. thats why still it is showing that queries only.
    My suggestion is once again clear the cache and Increase the Loglevel 5 or more and run the queries once again.
    I was also done the same steps when i was facing the same error.
    Thanks
    Sree
    Edited by: GSR on Oct 27, 2010 11:52 AM

  • Log Could Not Be Retrieved Error in session logs....OBIEE 11.1.1.6.0

    Unable to see session logs in session manager since 2 days. I'm using OBIEE 11.1.1.6.0. current log file size is 66MB.
    Error
    Log Could Not Be Retrieved
    Odbc driver returned an error (SQLExecDirectW).
    Error Details
    Error Codes: OPR4ONWY:U9IM8TAC
    State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 27002] Near <2310275073>: Syntax error [nQSError: 26012] . (HY000)

    Hi,
    This is a know Bug: @ BUG:13737150 - UNABLE TO VIEW LOG FILE FROM ADMINISTRATION > MANAGE SESSIONS
    Download and apply OBIEE 11.1.1.6.2 BP1. It is fixed in this version.
    Thanks.

Maybe you are looking for