Identify who terminated the process
Hello Community,
Is there any option or log is available to identify who killed/terminated the running process?
Thanks!
Product version: IRIS 2024.1
$ZV: IRIS for Windows (x86-64) 2024.1.1 (Build 347U)
Discussion (5)1
Comments
%ZSTOP routine may log the last user.
But it has no information on an external stopped process. E.g from MGMT portal
Hello,
If you have audit enabled, and the item "%System/%Login/JobEnd" is enabled, you may know which user killed a process
Hello @Yaron Munz
I've enabled the "%System/%Login/JobEnd" in Audit events. I opened a new terminal(new process) and I terminate the process via Management portal. However, I haven't seen any entry in the Audit log.
Hi @Ashok Kumar T,
you are correct, I was mistaken. The correct one is: "%System/%Login/Terminate"
Auditing | InterSystems IRIS Data Platform 2024.3
Great. It works!