Genesys Cloud - Main

 View Only

Sign Up

  • 1.  Recent Audit Viewer oddities with Directory User Updates by SYSTEM

    Posted 20 days ago

    Hi all,

    We are in the FedRAMP region and earlier this month noticed significant amount of Directory updates in the Audit Viewer. This could be to the tune of hundreds per day. These updates are occurring multiple times a day to numerous directory users. When we compare the changed properties all we notice is the version is incrementing by one and no other values appear to be changing. 

    The Service Name is Directory

    Entity Type is User

    Action is Update

    User Name is SYSTEM

    Has anyone else ever ran across this scenario in their FedRAMP or other region? We believe it started earlier in July. We have opened a ticket with Support and they are helping investigate. We haven't discovered anything internal yet that could be making these daily directory updates and we aren't using SCIM.

    Here is an example screenshot:

    image

    Thanks,


    #API/Integrations
    #ArchitectandDesign
    #Security
    #System/PlatformAdministration

    ------------------------------
    Shane Jenkins
    IT Sys Admin Mgr
    ------------------------------


  • 2.  RE: Recent Audit Viewer oddities with Directory User Updates by SYSTEM

    Posted 20 days ago

    Hello Shane,

    I have not seen this before but I am curious what Product Support is able to find in their investigation. Could you please share their findings when they respond?



    ------------------------------
    Jason Kleitz
    Online Community Manager/Moderator
    ------------------------------



  • 3.  RE: Recent Audit Viewer oddities with Directory User Updates by SYSTEM

    Posted 19 days ago

    Hi Jason,

    Will definitely update this thread once we and support nail down what may be happening. 

    Thanks!



    ------------------------------
    Shane Jenkins
    IT Sys Admin Mgr
    ------------------------------

    Original Message


  • 4.  RE: Recent Audit Viewer oddities with Directory User Updates by SYSTEM

    Posted 19 days ago

    Hi Shane,

    I have the same issue in EUC1 region. This event happens when a user is logging in. The update is version only or "address"-related without making changes. I opend up a case at the Genesys support. My Case number is 0004115955. Would you share your case number with me? This way both supportes could examine the problem together.
    Its really annoying to have to check all this senseless audit events.



    ------------------------------
    Christoph Domaschke
    Produktmanager Kunden-Dialog-Center
    ------------------------------



  • 5.  RE: Recent Audit Viewer oddities with Directory User Updates by SYSTEM

    Posted 19 days ago

    Hi Christoph,

    Thanks for responding and glad to hear we may not be alone in this. 

    Our case number is 00009055 with FedRAMP support. I just opened Audit Viewer and today there are numerous entries with these "user directory updates" continuing with seemingly only the version incrementing. 

    If you get any word on what may be ongoing, please share and I'll do the same here.

    Thanks again!



    ------------------------------
    Shane Jenkins
    IT Sys Admin Mgr
    ------------------------------

    Original Message


  • 6.  RE: Recent Audit Viewer oddities with Directory User Updates by SYSTEM
    Best Answer

    Posted 4 days ago

    Wanted to follow-up on this thread.

    After working with Support, Dev identified the root cause and has implemented a fix. A fix was put into place late last week into the FedRAMP region at least. Christoph, hopefully this resolved your issue as well. 

    Unsure of the exact root cause, but it appears login events were simply being erroneously logged to the Audit Viewer. Those have stopped for us now.

    Thanks,



    ------------------------------
    Shane Jenkins
    IT Sys Admin Mgr
    ------------------------------

    Original Message


Related Content