By default, audit records from SAS Logon Manager are not included in the User Activity Report. To include SAS Logon Manager audit records, which can help track when users log on and logout, complete the following steps:

1. Update the genAudit command-line arguments (commandArgs) to include SASLogon using the following command:

/opt/sas/viya/home/bin/ops-config -base config/ops-agentsrv/sas.ops.task/genAudit load -values "commandArgs=-a reports,dataPlans,casManagement,casAccessManagement,SASLogon -l 1000 -d 7 -v"

2. Restart sas-ops agentsrv:

sudo systemctl restart sas-viya-ops-agentsrv-default

3. Verify that SASLogon is listed in the genAudit commandArgs:

 /opt/sas/viya/home/bin/ops-config -base config/ops-agentsrv list | grep genAudit

4. Create a new rule (see Add a Rule) that grants sas.opsagentsrv Read access to the audit endpoint, using the following criteria:

Object URI: /audit/**

Container URI: /audit/

Principal type: User

Principal: sas.ops-agentsrv

Rule Type: Grant

Permissions: Read

Note: A warning is displayed when you enter the sas.ops-agentsrv principal. You can ignore this warning.

Within two hours, SAS Logon Manager audit records should be displayed in the User Activity Report.