Improve Admin logging level in Cognos logs to capture all the events

Admin activity applies to all the users who use the UI. A user in the context of this deliverable is anybody that uses the application including other teams and the application team themselves. Admin activity applies to the application code unique to your application.

Remediation:

Users of this application that have entitlements described as administrative should have their actions logged.  This includes but is not limited to actions such as locking accounts, password resets, permission changes or application functionality changes.

The admin log should show when administrative actions were accessed, what admin actions were accessed, who accessed them, and It should also show the result of that access.(for example the result could be that an admin successfully modified a user)

Examples:

example 1:

2024-04-25 17:37:58,854 [26] INFO  RubyAdminLog AdminAction:UpdateResource,ID:,LANID:XYZ123,Query:{Comments:},Requestor:Rallabasliko, Sang Rao,Requestor Role:BSM Team Member,Type:Update Resource, ModifiedOn:4/25/2024 5:37:58 PM

example 2: 

Thread [ID: 44, Name: ajp-nio-30.123.90.201-20120-exec-10] [ OBRC Admin Veria, Doiko (LAN ID: XYZ123)]  accessed admin tab for search functionality.

example 3:

| 71573 | privileged_access | xyz123 | 2024-05-21 22:10:42 | hli_appserver_entpega            | {"appName":"Foreclosure","eventCategory":"Security administration event","eventType":"Workbasket has changed","id":"2b04c0f2-e244-467e-871c-e9fa4c1650b7","ipAddress":"30.153.113.246","nodeID":"53681-prod-user04-wu","operation":"update","operatorID":"ZKj6Q4O","requestorIdentity":"20240517T192534","tenantID":"shared","timeStamp":"Mon 2024 May 20, 20:35:07:986","workBasketID":"DATA-ADMIN-WORKBASKET NR_FEMA4781TX0517202408152024_WB","workBasketName":" Non-Workable Work Basket"}  

Some of the action codes that would show what privileged access is used for that would satisfy the MRF Privileged access deliverable would include the action codes found under the Privileged Access column below.

Privileged Access

accountlock

accountunlock

lockout

permission changes

adminaccess

password reset

install

uninstall

security

create

delete

update