Question
How to find out who changed an Account/Reseller name?
Answer
Perform the following steps for investigation:
Search for 'EditAccountGeneralHandler' pattern in
/var/log/pa/pui/pui.log
on all of your UI servers:#grep 'EditAccountGeneralHandler' /var/log/pa/pui/pui.log 08:26:47.038 [default task-168] DEBUG c.p.p.c.c.p.m.pages.PDefaultPage - Action 'pcp.account.view.EditAccountGeneralHandler' is black
Open the log and find the aforementioned line:
08:26:47.038 [default task-168] DEBUG c.p.p.c.c.p.m.pages.PDefaultPage - Action 'pcp.account.view.EditAccountGeneralHandler' is black 08:26:47.039 [default task-168] DEBUG c.p.p.u.i.data.DataAccessInitializer - DAI: initRequest on com.plesk.p2.util.impl.data.DataAccessInitializer$DataAccessImpl@13b1e5a 08:26:47.039 [default task-168] DEBUG c.p.p.c.c.p.m.pages.PDefaultPage - ****************NEW REQUEST*************** request scheme: http, data scheme: http data.getParameters(): {action=pcp.account.view.EditAccountGeneralHandler} {postal_code=018982} {antiback_token=1003678647} {_target=} {address2=} {city=Singapore} {hashcode=407aaf5f} {optimizeit=yes} {referer=brand.com} {event1234submit=doSubmit} {bw_id=3a693ace047402c2e090b7458b4fc367} {company_name=Reseller Name} {country=sg} {address= Marina Bay Financial Centre} {never_used_param=x} {state=}
Find the staff member ID by the session ID specified in the request above:
[root@ui6 ~]# grep "3a693ace047402c2e090b7458b4fc367.*userId" /var/log/pa/pui/pui.log 08:21:52.369 [default task-246] DEBUG c.p.p.c.c.pcp.util.login.LoginHelper - registerLogin sid=3a693ace047402c2e090b7458b4fc367, loginHistoryImpl=class com.sun.proxy.$Proxy38, userId=1000001, realUserId=0, fromIP=200.100.200.0, url=https://bizappcp.starhub.com/, tag=c4fde823-0aca-47b1-ac7d-76e1d804d60c
- Find the details on the staff member in OA > System > Users > search by
userId
from the output.