Security

Navigation:  FileCOPA Manual >

Events
Previous pageReturn to chapter overviewNext page

Global events, whereby actions such as messages to the FTP client, email messages to the Server Administrator or sounds on the server can be configured in response to various events, such as users logging onto the server, uploading or downloading files.

Any active events will show in bold in the events list.

This is identical to events configured user by user, and if there is a conflict, the User Event will supersede any Global event configured here.

CAUTION - Do not configure Actions for Events that may be triggered very often, for example if an attack is mounted on FileCOPA. If the server is flooded with Connects or Bad Logins, then a continuous sound or 1000 email messages may not be welcome!

The Event On Failed Login is best used as a User Event, rather than as a Global Event. An attack which floods the server with a string of usernames and passwords would repeatedly trigger this Event, and could, for instance, send hundreds (or even thousands of email messages).

Certain events also have an additional option, not shown in the screenshots below:

SQL

This enables you to add data to an SQL database via an ODBC connector.  It is thus possible to track activity in more detail, by extracting information from the database. Any properly configured ODBC connector on the server machine can be used.

Ensure the SQL command conforms to your server's specification and values are quoted as needed.  For example:

INSERT INTO FileCOPA (Details,EventDate) VALUES("User <<USERNAME>> Logged on","<<DATE>>  <<TIME>>");

Note that because FileCOPA is a 32 bit application the ODBC connector needs to be configured in the Windows 32 bit ODBC Data Source Administrator.  If you are running a 32 bit version of windows then this is as normal, but if you are running a 64 bit version of windows you need to start the Administrator manually, you can't open it from the Control Panel.

Run the command c:\windows\sysWOW64\odbcad32.exe.

Also, because FileCOPA runs as a system service you need to configure the connection in the System DSN not the User DSN.

 

Send a Message

global_events_message

Send an Email

global_events_email

Various information can be added to the subject and/or body as shown below, and the email can be sent to multiple addresses by entering a list, separated by commas, eg:

me@example.com,you@example.com,him@example.com

 

Data that can be inserted in message body or subject
Note that some options may be disabled where they are not appropriate to the context.

Client's IP Address
IP Address of the client that connected to FileCOPA

Filepath
Path and filename of the file that was uploaded or downloaded. eg \pub\test.txt

Filepath As above, but shows only the path without the filename

Full Filepath Full path from the server root - be very cautious using this as it could be a serious security risk!

Client's Host Name
This can only be supplied if there is a reverse DNS entry for the Address

Filename
The name of the file that was uploaded or downloaded. eg test.txt

Username
The username used to connect to FileCOPA (only available after successful login)

Old filename
The original filename, where a file is renamed.

Time
The time the event occurred.

Transferred Data Size
The total size of the data transferred when a file is uploaded or downloaded.

Date
The date on which the event occurred, in the format m/d/yyyy But please see this note about Date Format

Insert Disk Quota
Returns the space allocated to the user's disk quota, or "Unlimited" if a quota has not been set.

Long Date
The date on which the event occurred, in the format: 05 August 2008

Insert Disk Free Space
Returns the free space on the user's home drive, or the space left in their quota if a quota has been set for this user.

Run a Command

global_events_command

Play a Sound

global_events_sound

Send a Text File

global_events_textfile

Add to Custom Log File

global_events_custom_log

Date Format

The Short Date Format for events is taken from the System Time Format, not from the user's configuration. The two may coincide, or they may not!

System Time Format is defined in a Registry entry:

HKEY_USERS\.DEFAULT\Control Panel\International\sShortDate

For US Date Format this should be MM/dd/yyyy

For UK (and most other countries) Format this should be dd/MM/yyyy