Chat audit logging can be configured at system installation or reconfiguration time using the install.sh script.
The chat audit logs are placed in /var/iic/chatlog on the hosts assigned to run the XML router and meeting controllers. Conferencing IM and Conferencing chat room messages are written to the file /var/iic/chatlog/chat.logMeeting chat messages are written to /var/iic/chatlog/mtgchat.log.
The chat messages contained in chat.log are XML stanzas:
<message type='<"chat"|"groupchat">' from='<from_jid>' to='<to_jid>' time='<timestamp>' > <body> ... </body><x xmlns='jabber:x:event' /> </message>
The from_jid and to_jid tags have the forms:
<screenname>@<xmlrouter_hostname>/<resource>
<resource> is a session identifier in the case where the message type is “chat” and it identifies the sender screen name in the case of “groupchat” type messages.
The time stamp has the form <YYYY><MM><DD>"T"<hh><mm><ss> and uses GMT time.
Each chat message is logged to a line in mtgchat.log. The each line contains comma-separated fields. Each field is quoted with double quotes at the beginning and end of the field (for example, “field value”).
The fields are as follows:
Table 6-4 Chat Audit Log Fields