where to find scheduled password change logs

Test & Change Passwords logs are going to be located here: C:\Program Files\BeyondTrust\BeyondInsight Gateway Services\PasswordServices\logs

The logfile you’ll be looking for is “BeyondInsight.PasswordServicesxxx.txt”.

Depending on what you’re looking for, you may need to temporarily increase the log levels for Gateway Services.

There are also references to Password Changes (and Smart Rules processing) in the Omniworker logs located here: C:\Program Files (x86)\eEye Digital Security\Retina CS\Logs (or C:\Program Files (x86)\BeyondTrust\BeyondInsight\Logs depending on version)

For reference, this is a great KB to keep handy for the UVM log locations: https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0018787

Hi @Raja Sekhar   There is also a kb article on how to troubleshoot scheduled passwords not changing that may be of some help.

Stuck in pending status showing hourglass - Scheduled passwords are not changing. -KB0020685

We are facing a common challenge in password vaulting systems where the password age isn't directly tracked, and the password hash changes even when unrelated attributes are modified. This makes it difficult to determine when the password was last changed.

Problem Summary

• No dedicated timestamp for password change.
• Password hash changes even when non-password attributes are modified.
• You need to detect passwords older than 2 years to raise a security finding.

How to solve this in secret safe?