Question

How to find out who changed an Account/Reseller name?

Answer

Perform the following steps for investigation:

  1. Search for 'EditAccountGeneralHandler' pattern in /var/log/pa/pui/pui.log on all of your UI servers:

    #grep 'EditAccountGeneralHandler' /var/log/pa/pui/pui.log
08:26:47.038 [default task-168] DEBUG c.p.p.c.c.p.m.pages.PDefaultPage - Action 'pcp.account.view.EditAccountGeneralHandler' is black

  2. Open the log and find the aforementioned line:

    08:26:47.038 [default task-168] DEBUG c.p.p.c.c.p.m.pages.PDefaultPage - Action 'pcp.account.view.EditAccountGeneralHandler' is black
08:26:47.039 [default task-168] DEBUG c.p.p.u.i.data.DataAccessInitializer - DAI: initRequest on com.plesk.p2.util.impl.data.DataAccessInitializer$DataAccessImpl@13b1e5a
08:26:47.039 [default task-168] DEBUG c.p.p.c.c.p.m.pages.PDefaultPage -

****************NEW REQUEST***************
request scheme: http, data scheme: http
data.getParameters():
{action=pcp.account.view.EditAccountGeneralHandler}
{postal_code=018982}
{antiback_token=1003678647}
{_target=}
{address2=}
{city=Singapore}
{hashcode=407aaf5f}
{optimizeit=yes}
{referer=brand.com}
{event1234submit=doSubmit}
{bw_id=3a693ace047402c2e090b7458b4fc367}
{company_name=Reseller Name}
{country=sg}
{address= Marina Bay Financial Centre}
{never_used_param=x}
{state=}

  3. Find the staff member ID by the session ID specified in the request above:

    [root@ui6 ~]# grep "3a693ace047402c2e090b7458b4fc367.*userId" /var/log/pa/pui/pui.log
08:21:52.369 [default task-246] DEBUG c.p.p.c.c.pcp.util.login.LoginHelper - registerLogin sid=3a693ace047402c2e090b7458b4fc367, loginHistoryImpl=class com.sun.proxy.$Proxy38, userId=1000001, realUserId=0, fromIP=200.100.200.0, url=https://bizappcp.starhub.com/, tag=c4fde823-0aca-47b1-ac7d-76e1d804d60c
  4. Find the details on the staff member in OA > System > Users > search by userId from the output.

Internal content