Hello everyone, does anyone know how to view Event Logs in PWI?
is this question IIQ?
Nops, in this case it is related to IdentityNow, I installed PWI and made all the configurations, but when updating the password through AD, IdentityNow does not show in the search the trigger that the password change event occurred.
See this document:
To see the logs on the AD domain controller”
You should also be able to use the loggers for ccg logs on the VA:
Hi @guilherme_sec,
Regarding PWI events/logs:
- When you install PWI and start the service, once a password is intercepted, you can see it in the PWI log file.
- Once the password is captured, it is automatically sent to ISC, and this is also logged in the PWI log file. If the password is not sent to SailPoint, a failure message is logged in PWI, and nothing will be visible in ISC/IdentityNow.
- If the log shows that the password was successfully sent to ISC/IdentityNow, you can then check the events directly for the concerned identity. The password intercept event is logged under Search > Events, and you should also see synchronization events in other sync group sources.
If you don’t see anything in the logs or in ISC, it probably means there’s an issue with the configuration.
Also, check whether your DCs communicate with ISC without any problem or if you are using a VA as a proxy—make sure the config.yaml file is updated accordingly.
We experienced a similar issue during our first PWI installation.
I don’t use a proxy, but everything is configured correctly, the log shows that the PWI was downloaded correctly
Can you check if “PWDINT_SERVER_OU” if an OU is created ?
You can try to set log level to DEBUG.
Also try to ping/nslookup ISC url and api url from your DC to see if your’re able to communicate with your tenant.