Changelog configuration to audit specific attributes changes

Hi,
I am trying to configure changelog. The objective is to create a file having the change in specific attribute values for adds and mods. I configured the same and it creates the file also; but I don't see changes in that file and under the columns e.g. changeType and Firstname it shows the value 'T'.
Has anybody used the change log file and can guide me how to configure the same to audit chchanges on specific attriutes and redirectng to the file. Also can we also get old value and new value in that output file.

Hi,
The steps what you performed to enable audit logging were just for every cmdlet and every parameter in the organization, not for the user. So, the normal user who had run the cmdlet or parameter would be recorded on output.
I recommend you refer to the following article :
Administrator Audit Logging
Hope this helps!
Thanks.
Niko Cheng
TechNet Community Support

Similar Messages

Need help configuring Attribute Change in WLS 6.1

Hi there,
I did all it said in the documentation, lacking any sight of an SNMP
trap. I want to receive a SNMP trap if the
InvalidLoginAttemptsTotalCount changes (MBean: ServerSecurityRuntime).
I use
Attribute MBean Type: ServerSecurityRuntime
Attribute MBean Name:
petstore:Location=petstoreServer,Name=petstoreServer,Type=ServerSecurityRuntime
Attribute Name: InvalidLoginAttemptsTotalCount
I enabled SNMP, configure my TrapHost and started my trapdaemon. But I
don't get any trap even though I increased the counter by doing some
logins with the wrong password. Parallel to my attribute change I also
configured a counter monitor on the same attribute, with the same
disappointing result =:-(
Can anyone help ?
Greetings,
Alex

You need to set a target for the pool. Without target
pool service won't start. Also you need to provide
initial and maximum size for the pool.
Regards,
Slava Imeshev
"Nadeem" <[email protected]> wrote in message
news:3d6d9268$[email protected]..
>
Hi Slava, thanks for the reply. Here is the connection pool definition asextracted
from config.xml. Do you see any errors in this which would cause theexception
mentioned below?
-Nadeem
************* Connection Pool element in config.xml ********
<JDBCConnectionPool DriverName="oracle.jdbc.driver.OracleDriver"
Name="MyJDBC Connection Pool"
Properties="user=system;password=manager" TestTableName="cabin"URL="192.168.0.11:1521:tacit"/>
"Slava Imeshev" <[email protected]> wrote:
Hi Nadeem,
Could you show us the connection pool definition?
It can be extracted from config.xml
Regards,
Slava Imeshev
"Nadeem" <[email protected]> wrote in message
news:[email protected]..
Hi,
I need to create a connection pool in WLS 7. Here are the specificsof my
environment:
1. RDBMS: Oracle 8i
2. Driver I want to use: Oracle thin 8.17 (provided with WLS 7)
3. IP address of machine on which database resides: 192.168.0.5
4. Port number: 1521
5. Name of database: MyDB
6. user: scott
7. password: tiger
Given the above,I do not know exactly what to fill out in the
following
fields
that appear in the Admin Console's connection pool creation form:
1. Name of connection pool (OK, this one I know!)
2. URL string (exactly what should it be, given above info?)
3. Driver Classname (I want to use Oracle thin 8.17, so what shouldI fill
here?)
4. Properties (exactly what should I fill here, given above info?)
5. ACL Name (completely stumped here! Documentation says ACLs havebeen
replaced
by policies in WLS 7 - so what to fill here?)
Could someone please help me correctly fill out these fields usingthe
information
I provided in the first paragraph.
BTW, I'm logged into WLS as Administrator.
Much obliged,
Nadeem

Audit of attribute value change: is the old value available?

When changing the value of an user attribute in the FIM Portal, the new attribute value is properly logged. This can be read in the request and in the standard report FIMUserHistory.
The question is, what about the old value that was replaced? Is the old value available in the Data Warehouse somewhere, so one can make a report or is it gone forever (of course one can find the old value by looking at the previous attribute change or creation
event, but this could be too long time ago)?
Thanks for helping,
Didier.

As far I remember (I don't have access to test FIM Reporting now) in reports stored on Data Warehouse, there is no such thing as "old value". But as far I remember it, also very old data is stored there, so there can be something like:
User: JJK003 -> New attribute (mail) value: [email protected] (12.12.2013)
User: JJK003 -> New attribute (mail) value: [email protected] (12.02.2014)
so, if you look closely to a history and sort it by user - you can determine what was the old value.
http://technet.microsoft.com/en-us/library/jj133843(v=ws.10).aspx
In report, you have always most recent display name of this user and of attribute's display name, but history should show what value was inserted long time ago and what value was set a week ago - than you know what value was there previously.
But please be aware that users report, according to TechNet, does not include all properties:
This report provides information about changes to key attributes on user resources in FIM, including account name, email, job title, and
employee start/end date.
Keep trying

Audit/Log GPO changes and Logging of new addition of Domain Controllers in the Event Log

Hi all,
We am trying to log the following items in the event log for Windows 2012. This applies to a domain controller.
1) Audit any changes made to the Group Policy
2) Log the addition of new domain controllers added to the system.
We need the windows event log to record the above events for security purposes. Can anyone advise if this is doable? If yes what are the steps.
Thank you

Hi,
>>1) Audit any changes made to the Group Policy
We can enable audit for directory service object access and configure specific SACL for group policy files to do this.
Regarding how to step-to-step guide for auditing changes of group policy, the following two blogs can be referred to for more information.
Monitoring Group Policy Changes with Windows Auditing
http://blogs.msdn.com/b/ericfitz/archive/2005/08/04/447951.aspx
Auditing Group Policy changes
http://blogs.msdn.com/b/canberrapfe/archive/2012/05/02/auditing-group-policy-changes.aspx
>>2) Log the addition of new domain controllers added to the system.
Based on my knowledge, when a server is successfully promoted to be domain controller, event ID 29223 will be logged in the System log.
Regarding this point, the following thread can be referred to for more information.
Is an Event ID for a completed Domain Controller promotion logged on the PDC?
https://social.technet.microsoft.com/Forums/windowsserver/en-US/11b18816-7db0-49e2-9a65-3de0e7a9645e/is-an-event-id-for-a-completed-domain-controller-promotion-logged-on-the-pdc?forum=winserverDS
Best regards,
Frank Shen

RADIUS and Vendor-Specific attributes

Hi,
I'm trying to add a vendor specific attribute (Cisco AV Pair) to BMAS
(NMAS 3.1.2 on NetWare 6.5 SP6). I can add any generic attribute I
want, but any of the vendor-specific attributes are not sent back in the
radius access-accept packet. Is there some configuration change I need
to make to support vendor specific attributes? They all show up in
ConsoleOne, I can add them, and they are saved when I hit OK.
Thanks for any suggestions!
Greg

In article <UG2Jm.1195$[email protected]>, Greg Palumbo
wrote:
> I read the other two recent threads on this, it does sort of sound like
> a snapin issue, but those are usually under the 1.2\snapins directory I
> thought. what about installing a fresh copy of C1 on the C:\ drive from
> the BMAS CD or from NW65SP7? Also, wouldn't all the replaced sys/public
> files be in SYS/SYSTEM:\BACKSP7? Maybe something like Beyond Compare or
> WinMerge could flag all the changed files easily...
>
My latest thinking is that this is related to security. The failing
attribute contains an encryption of the DAS client password. I'm assuming
that ConsoleOne relies on some background process to do the encryption, and
that between SP7 and SP8, it changed. The new attributes are longer than
the old ones, so the snapin-related issue may simply be that it cannot read
what was stored.
I don't know if there is a particular security-related component that can
be reversed to allow changes to the DAS object, then updated again to put
things back to SP8.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Multi-Message-split with ABAP mapping and adapter specific attributes

Hi all,
With ABAP-Mapping I split 1 message to n messages.
So many files are generated in file-Adapter.
Everything fine.
But now I want the file names different using adapter specific attributes.
It is not possible to use variable substitution and write the file name in payload because of receiver restrictions.
I tried this with following similar coding in ABAP-Mapping:
data: lt_records TYPE MPP_DYNAMIC_TAB.
 Loop.
 l_file_name = "payload-Inbound"-information
 ls_record-namespace = 'http://sap.com/xi/XI/System/File'.
 ls_record-name = 'FileName'.
 ls_record-value = l_file_name. "l_file_name comes from inbound-payload
 append ls_record to lt_records.
 Endloop.
CALL METHOD dynamic_configuration->set_all_records
 EXPORTING
 records = lt_records.
If I start the interface I see in the monitoring the dynamic configuration with many entries for file-name in the the SOAP-Header mapping of the request message (following extract):
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:DynamicConfiguration xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="1">
<SAP:Record namespace="http://sap.com/xi/XI/System/File" name="FileName">BPAADDRESS.XML</SAP:Record>
<SAP:Record namespace="http://sap.com/xi/XI/System/File" name="FileName">BPABROKERROLE.XML</SAP:Record>
<SAP:Record namespace="http://sap.com/xi/XI/System/File" name="FileName">BPACOMPANYSEGMENT.XML</SAP:Record>
<SAP:Record namespace="http://sap.com/xi/XI/System/File" name="FileName">BPACUSTOMERROLE.XML</SAP:Record>
The result is that all files have the same file name (last entry in dynamic configuration).
Is it possible to write the adapter specific configuration in ABAP-mapping for every single result message??
Thank you for your help,
Florian

Hi Florian,
I've a different idea...I dont think its a "right solution" but just another work around..it involves a BPM...
In your ABAP mapping..set the dynamic config with as many variables as number of different messages...i.e. use the variables like 'FileName1', 'FileName2'...'FileName6' instead of 'FileName'. But use the same namespace 'http://sap.com/xi/XI/System/File'
Call the above mapping in a BPM and capture the individual messages and set the attribute 'FileName' from the values of 'FileName1' to 'FileName6' accordingly using Message Mapping and then send the message using the 'Send' step.
before you try this, try using the variable names 'FileName1' ...'FileName6' in the receiver adapters...enable the ASMS. I know we need to select which variables from the dynamic config to be used by the adapter by specifically selecting 'FileName', 'Directory' etc...but just give it a try and see if it works..
Or..instead of using a BPM..you can combine Henrique's idea...use Adapter module to set the value for 'FileName' from variables 'FileName1'...'FileName6' accordingly.
hope I'm clear..lemme know if you have any questions..
cheers
praveen

Adapter specific attributes - SOAP Adapter

Hi,
I am trying to use the adapter specific attributes of the receiver SOAP adapter. But I am not able to view the Dynamic configurations in sxi_monitor corresponding to this message. Any clue why!?
I read through the SOAP adapter help on help.sap.com,
http://help.sap.com/saphelp_nw2004s/helpdata/en/69/a6fb3fea9df028e10000000a1550b0/frameset.htm
Here it says:
If you want to use header fields, set the relevant indicator for Variable Header. The technical names for the fields are XHeaderName1, XHeaderName2, XHeaderName3. The parameters are embedded in the HTTP request under the names you enter here.
But I donot find an option where I can enter the names. Am I missing something here?
Regards,
Smitha.

Hi Smitha,
I did not try to use adapter-specific attributes with SOAP-adapter, but with mail-adapter. The documentation is quite similar, so I excpect similar results...
So as far as I understood, the parameters XHeaderName1, ... etc are for dynamic extension of the set of adapter-specific attributes. For example, if you want to add some more information in the message header, you can program an adapter module and you have now a guide how to name the additional attributes.
Usually, the "standard" adapter-specific attributes are starting with "S" (Sender) or "T" (Receiver). You can find the names in the documentation of the SOAP-adapter.
In order to use the adapter-specific attributes, you have to check both indicators (adapter-specific attributes, variable transport binding). If this still doesn't work, you should use OSS. In my scenario (mail adapter) this didn't work, too. The reason was, that there was a bug in the adapter metadata (Integration Repository) of SAP BASIS. There was a SAP note, where I could download the correct adapter metadata. Maybe you can find a SAP note for the SOAP Adapter.
Although this is probably not the final solution, I hope this guides you a step further.
Regards,
Torsten

Using Adapter-specific attributes in Mail adapter

Hi,
I try to use adapter-specific attributes in my Mail adapter. I set the "Use Adapter-Specific Message Attributes" indicator, but I do not get a result in the mapping and also in the SXMB_MONI the attributes are not visible.
The documentation also refers to Variable Transport Binding indicator:<a href="http://help.sap.com/saphelp_nw04/helpdata/en/23/c093409c663228e10000000a1550b0/content.htm">http://help.sap.com/saphelp_nw04/helpdata/en/23/c093409c663228e10000000a1550b0/content.htm</a>
Could this be the problem? I cannot find this indiciator! Does anyone know where I can find this indicator?
Regards,
Torsten

Hi,
The values for the parameters, set using adapter specific message attributes are available at runtime in the path http://sap.com/xi/XI/System/Mail.
We need to write UDF's that can extract the values from this path.
For Ex:
DynamicConfiguration conf = (DynamicConfiguration) container.getTransformationParameters() .get(StreamTransformationConstants.DYNAMIC_CONFIGURATION);
DynamicConfigurationKey key = DynamicConfigurationKey.create(
 http://sap.com/xi/XI/System/File,
 FileName);
String valueOld = conf.get(key);
if (valueOld != null) {
 String valueNew = valueOld.replaceAll(input,output);
 conf.put(key, valueNew);
If you check Dynamic configuration in sxmb_moni, you would be able to find the values for all the attributes that have been set in the adapter.
Regards,
Smitha.

Customer-specific attributes (properties) for processes?

Hello community,
I already know how to define customer-specific attributes (properties) for documents stored in Solution Manager using the Document Modelling Workbench. For documents, everything works fine, so far.
But: I also want to define customer-specific properties for processes. Is this possible? If yes, how do I do that? I cannot find any related configuration options -- neither in SPRO nor in Solution Manager's own project configuration area.
Thanks in advance,
Thomas

Hi,
In SPRO, naviagete to SAP Solution Manager Implementation Guide -> SAP Solution Manager -> Scenario-Specific Settings -> Implementation/Upgrade -> Blueprint and Configuration -> Object Attributes -> Definition of Customer Attributes for Object Types
Best regards,
Jacques.

It's possible to audit what was changed in tables ?

Hi,
I need to audit what was changed in some tables in my ECC 5.0 sytem.
It's possible ?
I know Tcode SM19 and SM20 has some audit options, but i didn't find anything about what was changed in tables.
Thanks.

Hi ,
There are few ways by which u can trace the Changes made by User.
1. Goto Tcode SE03
2. Double click on Search for objects in Requests/Tasks
3. Enter the table/view name you want to find the changes in.
4. Execute.
In this case, you will find all the change request/tasks that were used to make modifications in the table. Provided, you have settings to record all the chanes made in your SAP system in change requests.
Go to SE11---> Select Display mode
Go to Utilities Tab---->Version--> version Management
check out the last change in the transport request.
Otherwise Checkout for the attributes of the table in SE11 transaction.
Thanks
Ramakrishna.

Updating only specific attributes.

Hi,
I am using JDEV 11.1.2.1.0
How do I update only specific attributes in a VO/EO ?
I have already selected the specific row in the AM and set the attribute...but how do I update the changes ?
thanks in advance.

To persist the changes to the db, you have to commit transaction.
Timo

Check specific attributes from common views

Is there a was to only checkout certain attributes from a common view?
For example if I am only interested in checking out the lastLogon , userAccountControl and Description (AD) attributes from the "user" view. How would I do so with out checking out the entire "user" view?
During a workflow I wish to check out the specific attributes and then make my changes and then check the object back in.
Please let me know if this is possible.
Another example)
Currently if i wanted to unlock all acount from a workflow I would use the following code. But I am really only using the "account locked" attribute so if there were a way to limit the view checkout to the "accountlocked" attribute then I could probably streamline the process.
<Activity id='3' name='UnlockAD'>
 <Comments>
 On Success do a global unlock .
 </Comments>
 <Action id='0' application='com.waveset.session.WorkflowServices'>
 <Argument name='op' value='checkoutView'/>
 <Argument name='type' value='Unlock'/>
 <Argument name='id' value='$(accountId)'/>
 <Argument name='subject' value='admin_user'/>
 <Argument name='authorized' value='true'/>
 <Return from='view' to='uview'/>
 </Action>
 <Action id='1'>
 <expression>
 <block>
 <set>
 <ref>uview.global.accountLocked</ref>
 <s>false</s>
 </set>
 </block>
 </expression>
 </Action>
 <Action id='2' application='com.waveset.session.WorkflowServices'>
 <Argument name='op' value='checkinView'/>
 <Argument name='subject' value='admin_user'/>
 <Argument name='authorized' value='true'/>
 <Argument name='view' value='$(myview)'/>
 </Action>
 <Transition to='Notify User'/>
 </Activity>

sec_tk wrote:
Checking out a user view will always get you the whole view, you cannot get a partial view. What would be possible is coding your own view, but that requires a lot of hacking and I don't think it's worth the effort.Sorry to jump in late but just for clarification of others who happen to stumble on this by a search you most definitely can checkout a view with only partial data returned. It's one of the optimization techniques recommended to speed up workflows.
See [http://docs.sun.com/app/docs/doc/820-5823/ahyci?l=en&a=view&q=TargetResources] and use the TargetResources argument when checking out a view.So your checkout view action would look like this:
<Action application='com.waveset.session.WorkflowServices'>
 <Variable name='view'/>
 <Argument name='op' value='checkoutView'/>
 <Argument name='type' value='User'/>
 <Argument name='id' value='$(WF_CASE_OWNER)'/>
 <Argument name='Form' value='Empty Form'/>
 <Argument name='TargetResources'>
 <list>
 <String>Resource 1</String>
 <String>Resource 2</String>
 </list>
 </Argument>
 <Return from='view' to='user'/>
</Action>

How to trigger attribute change run manaully

Hi all,
i need to update a master data object with new data. i have the flat file. i scheduled info package and exected DTP (datasource -
>Master data object). now I need to trigger attibute change run manually. How would i do that?
Pls help
Please search the forum before posting a thread
Edited by: Pravender on Feb 4, 2012 11:16 AM

HI Ramya,
Activation master data is different than running Attribute change run.
Activate master data will only activate the master data in info object(Change the records in M version to A version.
Attribute Change Run will activate the master data in info object and updates the aggregates with new data if you have any aggregates built on this info object.
Be specific while asking the question.
Regards,
Venkatesh

Can I grant permission to write in specific attributes using security groups

Hi
I Created GPO that write the computer name in the one of the user attribute "comment attribute " when he logged on
then i went to OU and grant self delegate permissions to allow the users of that OU to write on "comment attribute
but this did not work for the users how have been disabled form inheritance
so instead of grant delegate permissions to the OU
Can I grant permission to write in specific attribute "comment attribute " using security groups "Domain User "??

Hi,
Open Active Directory Users and Computers.
On the View menu, select Advanced Features.
Right-click the object for which you want to assign, change, or remove permissions, and then click Properties.
On the Security tab, click Advanced to view all of the permission entries that exist for the object.
To assign new permissions on an object or attribute, click Add.
Type the name of the group, computer, or user that you want to add, and then clickOK.
In the Permission Entry for ObjectName dialog
box, on the Object and Properties tabs,
select or clear the Allow or Deny check
boxes, as appropriate.
http://technet.microsoft.com/en-us/library/cc757520(v=ws.10).aspx
Regards,
Rafic
If you found this post helpful, please give it a "Helpful" vote.
If it answered your question, remember to mark it as an "Answer".
This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!

Audit specific objects for specific users

audit statement has the option to choose audit by user list
audit object has the option to choose audited objects
now i need to audit specific objects, i.e. user A's tables accessed by a specific group of users, let's say ALL users other than A
Is it a simple way to achieve this goal? (audit A's tables that accessed by all database users other than A)
Thanks!

sorry, the link works now. However, there is nothing new in 10G, same as I read from 9i document. See my highlight below in the quoted document text, my requirements is the combination of them ( specific users and specific objects). Thanks anyway.
<quote
Table 8-1 Auditing Types and Descriptions
Type of Auditing (link to discussion) Meaning/Description
Statement Auditing Enables you to audit SQL statements by type of statement, not by the specific schema objects on which they operate. Typically broad, statement auditing audits the use of several types of related actions for each option. For example, AUDIT TABLE tracks several DDL statements regardless of the table on which they are issued. You can also set statement auditing to audit selected users or every user in the database.
Privilege Auditing
 Enables you to audit the use of powerful system privileges that enable corresponding actions, such as AUDIT CREATE TABLE. Privilege auditing is more focused than statement auditing, which audits only a particular type of action. You can set privilege auditing to audit a selected user or every user in the database.
Schema Object Auditing
 Enables you to audit specific statements on a particular schema object, such as AUDIT SELECT ON employees. Schema object auditing is very focused, auditing only a single specified type of statement (such as SELECT) on a specified schema object. Schema object auditing always applies to all users of the database.
Fine-Grained Auditing
 Enables you to audit at the most granular level, data access and actions based on content, using any Boolean measure, such as value > 1,000,000. Enables auditing based on access to or changes in a column.
/quote>

Changelog configuration to audit specific attributes changes

Similar Messages

Maybe you are looking for