If attachments contain sensitive data and information, security managers benefit from logging of attachment downloads. More specifically, they can check who downloaded an attachment and related details. This allows them to pass security audits without stress. With using STORM it is possible to display in the system log the users who have downloaded an attachment.
This feature does not have any user interface, it only logs the activities in the system log. However, the System Log module of the Administration group in the administrator interface can be used to review the log entries.
Setup
The following system configuration settings have to be changed to enable the feature.
-
MinimumLogLevel→ info -
UserAttachmentDownloadLog→ enabled
The following system configuration setting defines an optional prefix for the log entries. This makes it easier to parse the log file.
-
UserAttachmentDownloadLog::MessagePrefix
Usage
As an agent, go to the ticket detail view of a ticket, which has some attachments and download any attachment. As an administrator, check the system log.
The attachment downloads data are displayed as log entries. If the prefix for attachment download is defined then the entries contain this prefix.
Thu Oct 22 15:16:52 2020 (Europe/Berlin) info WebApp-10 ATTACHMENT - Download of 'Inquiry.pdf' (ticket '2020102210000033') by 'John Smith'.
Note
If the Dynamic Field Attachment feature is installed, the downloads of the attachments in the dynamic fields are also logged in the system log.
