Approval audit data in OIM

Hello,
There are few old requests in OIM (1 years old)=> database table data indicates request was "assignedto A and B approved" ... (how to gather information why was that? may be, if B was a proxy for A during that time?)
Thanks,

Compare these things:
1-Dates of PXD table(PXD_START_DATE and PXD_END_DATE);
2-get request details: REQ_ID of REQ table;
3-Go to ORC table with req_id and select the field ORC_ASSIGNED_TO;
hope this helps,
Thiago Leoncio Guimaraes

Similar Messages

Need to know the sqluery to find the disabled date from OIM 9.1.0.1

Hi Experts,
Need very urgent inputs from you all for the preparation of our audit.
We are using OIM9.1.0.1
We need to know the sqlquery for finding the Disabled date in OIM given the user ids, as currently we are unable to get the exact data from Historical Reports Option in OIM.
I need to give in this format:
select usr_login, usr_disabled from schemaname.tablename where usr_login in
('aaa','bbb'..... etc)
We have three attributes :USR_DISABLED_BY_PARENT,USR_DISABLED,USR_DEPROVISIONING_DATE,but none of them give the exact date,
USR_DISABLED gives just a flag as 1 or 0.
Also there are no other fields in the corresponding usr table.
So how to fetch the exact Disabled date from OIM system when I input the user ids.
Your immediate response is appreciated.
Thanks
SS

In the entire thread many experts have given nice queries in different formats...
The best approach would be to open up the SQL Developer, connect with the OIM Database and experiment with all sorts of SQL queries provided by all the experts..
Learn some SQL techniques, like Inner Join etc...
Then you yourself will be able to figure out what you need, in exactly which format, for which users and for whom you have to restrict
Then not only this question, you would be able to solve dozens of similar such issues yourself...
And trust me, nothing can match that...
Just in case, you are not familiar with SQL Developer,
http://www.oracle.com/technetwork/developer-tools/sql-developer/downloads/index.html
Oracle SQL Developer 3.2.1 (3.2.10.09.57)
September 24, 2012
The Disabled DATE will be the creation date of that entry in the UPA_FIELDS table when Users.Status changed to Disabled.
SELECT USR.USR_LOGIN, UPA_FIELDS.CREATE_DATE
FROM UPA_FIELDS
WHERE UPA_FIELDS.FIELD_NAME='Users.Status'
AND UPA_FIELDS.FIELD_NEW_VALUE='Disabled'
AND UPA_FIELDS.UPA_USR_KEY=USR.USR_KEY
AND USR.USR_LOGIN NOT IN ('XELSYSADM', 'XELOPERATOR', 'WEBLOGIC');

How to clean Audit records from OIM

Hi All,
I need to clean Audit records in OIM that are older than 15 months and I found out the following tables contains information about audits
1.UPA
2.UPA_FIELDS
3.UPA_GRP_MEMBERSHIP
4.UPA_RESOURCE
5.UPA_UD_FORMFIELDS
6.UPA_UD_FORMS
7.UPA_USR
How to develop script to delete the records older than 15 months?
Except UPA table, all other tables contain the column name "CREATE_DATE" & "UPDATE_DATE". what is the difference? and which one is required to implement above scenario?
Please guide me on the same...
Thanks in advance

Whenever you enable auditing the information about User Account Changes is captured in form of Snapshots and stored in the UPA table which would eventually flow to the remaining tales after being separated by normalizing this data using a post-processor internal to OIM auditing engine.
- So for remaining tables this is used moreover for reporting purposes in OIM. If you clear the data then the you know what you are doing ?
- Now for the primary table UPA you need to look for fields EFF_FROM_DATE & EFF_TO_DATE

Audit data from Identity Mgr repository

Hi,
I want to get the data like, If I create an account for a user and assign him certain resources today (say date is a) and assign him some resources.These resources need to be approved,they are approved after two days (say date is b).The is created at that time.
Any clue How I could the date when request was made,
Is there any way or workflow service op that lets us get the audit data for a user from repository.
Thanks,
Pandu

In the Audit Vault Server infrastructure, there are a number of objects that are used to store the audit data from source databases. The Agent/Collector continually extracts and sends the audit data from the source databases into the Audit Vault repository. One of the tables that stores the 'raw' audit data is av$rads_flat which should never be externalized, changed, or manipulated by anyone.
Out of the box, a job runs every 24 hours to transform or normalize the raw audit data into the warehouse structure that the reports are run against. The warehouse tables are published in the Audit Vault Auditor's documentation in which you can run your own report tool or other plsql to analyze the audit data.
What do you want to do with the raw audit data?
Thanks, Tammy

Is there any way to export IT Resource data from OIM using the export tool?

Hello,
we are trying to migrate an OIM development environment to a preproduction environment and we need to migrate more than 400 IT Resources. We have exported some IT Resources and when we imported them in the preproduction environment their data was not migrated. Is there any way to export IT Resource data from OIM using the export tool? Or is there any other way to do this without doing it by hand?
Thank you for your help
Kind Regards

Well , OIM doesnot provide any such facility to export ITResource data along with ITResource .
Directly updating the DB could be an option ..
Thanks

Validate Date if it falls within 30, 120 and 365 days of the audit date I enter on any given day

PDF Forms in Acrobat 9 Pro
When auditing a file, I enter the date I am auditing it.
Example: 02/18/2015
I then enter dates of when information was last verified. Some of these dates need to fall within 30 days of the audit date I enter on any give day and others need to fall within 120 days and another within 365 days. If they don't fall within the specified number of days for that field, I would like it to give an error message in that filled.
Examples:
College Grad Date 01/15/2015
Certification Date 12/23/2015
License Date 02/13/2014 - This is over 365 days so I do not want the date, I want it to display "Need to re-verify"
I do not have any inkling of an idea of how to write this. Your help would be most appreciated.
Thank you.

Solved the problem- I contacted apple on their support line found on this page... http://www.apple.com/uk/support/mac/ and they were really helpful and talked me through what to do on the phone, I now have all three productivity apps. Hope this helps

To change the default value in approval column of Approve time data view

Approve working times in MSS
For a manager:
Approval view in approve time data iview has a column with name approval. The value is defaulted to approve all. Can any one let me know how to change this value.
Or point me to any documentation which will be of help with this.
ESS BP Version 1.41
ECC 6.0 EHP4
Thanks,
John.

Hi John,
uncheck the mass approval option in the Timesheet config.
Cheers!!!
Umang

Problem in setting user end date from oim to account expiry date in AD process form

Hi all,
i am updating the user end date from oim to user account expiry date in ad process form using oim api.
i am able to get the end date value from oim but when i am setting it using api it through exception but all other attribute i am able to update in process form.
i am facing the problem only with end date field because of different date format in OIM and AD .
so please suggest me what are date format in Active Directory and how can i change the oim date format to Active directory time format in in my java code.

Thanks for the reply.
But all iplanet users need not contain end date attribute, and its an update on existing user.
Can you please ellaborate more on Transformation class..?? example should be helpful.

Audit database. config auditing data source (DB2)

Hello expert,
I want to enable audit database for Business Object and I has followed the admin guide but not work.
I install Business Object enterprise XI 3.1 on AIX 5.3 .
When I installed BO ,I choose 'Use an existing database' and choose DB2. (The same database of SAP BW database)
And when the installation require the information of CMS and Audit database, I fill the same db alias as SAP BW database.
So now I has SAPBW , CMS and Audit data in the same database.
After installation I saw the CMS table in "DB2<aliasName>" schema.
But can not find the Audit table.
Does the audit table will create after installation?
Then I try to enable the audit database using cmsdbsetup.sh and I choose 'selectaudit' and fill in the information that it require.
Then it finish with no error.
"Select auditing data source was successful. Auditing Data Source setup finished."
But I still can not find any audit table in the database.
I run serverconfig.sh and I can't see the Enable Audit option when I choose 'modify a server'.
Any idea?
Thanks in advance.
Chai

Hello,
Thanks for your reply.
It is not a BO cluster.
And a log detail when select audit data source is show as below
Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST) /bodev/bobje/setup/jscripts//ccmunix.js started at Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST)
Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST) About to process commandline parameters...
Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST) Finished processing commandline parameters.
Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST) Warning: No password supplied, setting password to default.
Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST) Warning: No username supplied, setting username and password to default.
Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST) Warning: No authentication type supplied, setting authentication type to default.
Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST) Warning: No CMS name supplied, setting CMS name to machine name.
Wed Nov 17 2010 10:17:02 GMT+0700 (THAIST) Select auditing data source was successful.
Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST) /bodev/bobje/setup/jscripts//ccmunix.js started at Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST)
Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST) About to process commandline parameters...
Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST) Finished processing commandline parameters.
Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST) Warning: No password supplied, setting password to default.
Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST) Warning: No username supplied, setting username and password to default.
Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST) Warning: No authentication type supplied, setting authentication type to default.
Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST) Warning: No CMS name supplied, setting CMS name to machine name.
Wed Nov 17 2010 10:25:22 GMT+0700 (THAIST) Select auditing data source was successful.
And the CMS log file did not show any error.
Additional detail:
- My BW and BO are in the same server.
- I already grant all the rights to the user who relate to audit database.
- My BW and BO are in the same database.
- There is no audit table appear in the database.
- No Fix pack installed.
I wonder why BO audit connection did not see my database.
(In case of DB2, I think the db2 alias name is the same name of the database name (as default).
So if my database name is BWD then the database alias name should be BWD, am I right?)
Any idea?
Thanks in advance.
Chai

Database table of Match approval level data in shipment more tab

hi friends
i need to know the database database table of Match approval level data in shipment > more tab of PO.
pls help. its urgent.

Hi friends
Thank you all for reply. 2-Way, 3-Way or 4-Way values are coming against particular item according to the following combination of values in inspection_required_flag and receipt_required_flag column of PO_line_locations_all.
4-WAY :Inspection_required : Y , Receipt_required : Y
3-WAY :Inspection_required : N , Receipt_required : Y
2-WAY :Inspection_required : N , Receipt_required : N
it refers there is no fixed column in table based on which 2-Way, 3-Way or 4-Way values are coming for MATCH APPROVAL LEVEL field in that form. am i right? pls response.
One more thing, inspection_required_flag and receipt_required_flag columns are also available in mtl_system_items_b. My question is when a PO is created with any item which value combination is prioritized. i mean when i open Shipment form and go to More Tab, a value for MATCH APPROVAL LEVEL field is automatically set for that item. Where does that value come from? does it come from PO_line_locations_all or mtl_system_items_b ?
if my concept is not wrong it comes from mtl_system_items_b. after saving that PO the value is then stored in PO_line_locations_all.
if my concept is wrong in any way pls let me know. Thanks
Edited by: Lisan on Jul 15, 2009 9:45 AM

Analysing Task Audit, Data Audit and Process Flow History

Hi,
Internal Audit dept has requested a bunch of information, that we need to compile from Task Audit, Data Audit and Process Flow History logs. We do have all the info available, however not in a format that allows proper "reporting" of log information. What is the best way to handle HFM logs so that we can quickly filter and export required audit information?
We do have housekeeping in place, so the logs are partial "live" db tables, and partial purged tables that were exported to Excel to archive the historical log info.
Many Thanks.

I thought I posted this Friday, but I just noticed I never hit the 'Post Message Button', ha ha.
This info below will help you translate some of the information in the tables, etc. You could report on it from the Audit tables directly or move them to another appropriate data table for analysis later. The concensus, though I disagree, is that you will suffer performance issues if your audit tables get too big, so you want to move them periodically. You can do this using a scheduled Task, manual process, etc.
I personally just dump it to another table and report on it from there. As mentioned above, you'll need to translate some of the information as it is not 'human readable' in the database.
For instance, if I wanted to pull Metadata Load, Rules Load, Member List load, you could run a query like this. (NOTE: strAppName should be equal to the name of your application .... )
The main tricks to know at least for task audit table are figuring out how to convert times and determing which activity code corresponds to the user friendly name.
-- Declare working variables --
declare @dtStartDate as nvarchar(20)
declare @dtEndDate as nvarchar(20)
declare @strAppName as nvarchar(20)
declare @strSQL as nvarchar(4000)
-- Initialize working variables --
set @dtStartDate = '1/1/2012'
set @dtEndDate = '8/31/2012'
set @strAppName = 'YourAppNameHere'
--Get Rules Load, Metadata, Member List
set @strSQL = '
select sUserName as "User", ''Rules Load'' as Activity, cast(StartTime-2 as smalldatetime) as "Time Start",
      cast(EndTime-2 as smalldatetime) as ''Time End'', ServerName, strDescription, strModuleName
   from ' + @strAppName + '_task_audit ta, hsv_activity_users au
   where au.lUserID = ta.ActivityUserID and activitycode in (1)
        and cast(StartTime-2 as smalldatetime) between ''' + @dtStartDate + ''' and ''' + @dtEndDate + '''
union all
select sUserName as "User", ''Metadata Load'' as Activity, cast(StartTime-2 as smalldatetime) as "Time Start",
      cast(EndTime-2 as smalldatetime) as ''Time End'', ServerName, strDescription, strModuleName
   from ' + @strAppName + '_task_audit ta, hsv_activity_users au
   where au.lUserID = ta.ActivityUserID and activitycode in (21)
        and cast(StartTime-2 as smalldatetime) between ''' + @dtStartDate + ''' and ''' + @dtEndDate + '''
union all
select sUserName as "User", ''Memberlist Load'' as Activity, cast(StartTime-2 as smalldatetime) as "Time Start",
      cast(EndTime-2 as smalldatetime) as ''Time End'', ServerName, strDescription, strModuleName
   from ' + @strAppName + '_task_audit ta, hsv_activity_users au
   where au.lUserID = ta.ActivityUserID and activitycode in (23)
        and cast(StartTime-2 as smalldatetime) between ''' + @dtStartDate + ''' and ''' + @dtEndDate + ''''
exec sp_executesql @strSQLIn regards to activity codes, here's a quick breakdown on those ....
ActivityID     ActivityName
0     Idle
1     Rules Load
2     Rules Scan
3     Rules Extract
4     Consolidation
5     Chart Logic
6     Translation
7     Custom Logic
8     Allocate
9     Data Load
10     Data Extract
11     Data Extract via HAL
12     Data Entry
13     Data Retrieval
14     Data Clear
15     Data Copy
16     Journal Entry
17     Journal Retrieval
18     Journal Posting
19     Journal Unposting
20     Journal Template Entry
21     Metadata Load
22     Metadata Extract
23     Member List Load
24     Member List Scan
25     Member List Extract
26     Security Load
27     Security Scan
28     Security Extract
29     Logon
30     Logon Failure
31     Logoff
32     External
33     Metadata Scan
34     Data Scan
35     Extended Analytics Export
36     Extended Analytics Schema Delete
37     Transactions Load
38     Transactions Extract
39     Document Attachments
40     Document Detachments
41     Create Transactions
42     Edit Transactions
43     Delete Transactions
44     Post Transactions
45     Unpost Transactions
46     Delete Invalid Records
47     Data Audit Purged
48     Task Audit Purged
49     Post All Transactions
50     Unpost All Transactions
51     Delete All Transactions
52     Unmatch All Transactions
53     Auto Match by ID
54     Auto Match by Account
55     Intercompany Matching Report by ID
56     Intercompany Matching Report by Acct
57     Intercompany Transaction Report
58     Manual Match
59     Unmatch Selected
60     Manage IC Periods
61     Lock/Unlock IC Entities
62     Manage IC Reason Codes
63     Null

What is the best way to audit data

What is the best way to audit actual changes in the data, that is, to be able to see each insert, update, delete on a given row, when it happened, who did it, and what the row looked like before and after the change?
Currently, we have implemented our own auditing infrastructure where we generate standard triggers and an audit table to store OLD (values at the beginning of the Before Row timing point) and NEW (values at the beginning of the After Row timing point) values for every change.
I'm questioning this strategy because of the performance impact it has (significant, to say the least) and because it's something that a developer (confession, I'm the developer) came up with, rather than something a database administrator came up with. I've looked into Oracle Auditing, but this doesn't seem like we'd be able to go back and see what a row looked like at a given point in time. I've also looked at Flashbacks, but this seems like it would require a monumental amount of storage just to be able to go back a week, much less the years we currently keep this data.
Thanks,
Matt Knowles
Edited by: mattknowles on Jan 10, 2011 8:40 AM

mattknowles wrote:
What is the best way to audit actual changes in the data, that is, to be able to see each insert, update, delete on a given row, when it happened, who did it, and what the row looked like before and after the change?
Currently, we have implemented our own auditing infrastructure where we generate standard triggers and an audit table to store OLD (values at the beginning of the Before Row timing point) and NEW (values at the beginning of the After Row timing point) values for every change.You can either:
1. Implement your own custom auditing (as you currently do)
2. Flashback Data Archive (11g). Requires license.
3. Version enable your tables with Workspace Manager.
>
I'm questioning this strategy because of the performance impact it has (significant, to say the least) and because it's something that a developer (confession, I'm the developer) came up with, rather than something a database administrator came up with. I've looked into Oracle Auditing, but this doesn't seem like we'd be able to go back and see what a row looked like at a given point in time. I've also looked at Flashbacks, but this seems like it would require a monumental amount of storage just to be able to go back a week, much less the years we currently keep this data.
Unfortunately, auditing data always takes lots of space. You must also consider performance, as custom triggers and Workspace Manager will perform much slower than FDA if there is heavy DML on the table.

Moving Audit Data

Hello,
Error Created while moving audit data from existing runtime repository to Control Center using OWB Control Center Upgrade Assistant. Here OWBRTR2TST is Runtime repository in Control Center.
Error as follows:
Exception:
Failed to Migrate Audit Data into OWBRTR2TST java.sql.SQLException: ORA-02298:
Can not validate (OWBRTR2TST.co.FK_PARENT_CO) - parent keys not found
ORA-06512 at line 16
What we need to do to aviod this error.
Thanks
Santi

Hello
Even I was getting almost similar problem. Once you solve please let us know.
Mine is like this
Error Created while moving audit data from existing runtime repository to Control Center
Using OWB Control Center Upgrade Assistant. Here OWBRTR2TST is Runtime repository in
Control Center.
Exception:
Failed to Migrate Audit Data into OWBRTR2TST java.sql.SQLException: ORA-02298:
Can not validate (OWBRTR2TST.co.FK_PARENT_CO) - parent keys not found
ORA-06512 at line 16

How to show User Auditing data in dashboard/reports in MS CRM 2013 online?

HI,
I am having requirement to show user auditing details like user last logged in date/ session spent time in MS CRM 2013 online.
I did not found any option to query user Auditing data.
I found the Audit summary View but don't know how to use it.
Could any one suggest me how to achieve this.
Thanks
Baji Rahaman

Please try this
Public Function Decompress(ByVal arr As Byte()) As Byte()
Dim s As Byte()
Dim notCompressed As Boolean
notCompressed = False
Dim MS As System.IO.MemoryStream
MS = New System.IO.MemoryStream()
MS.Write(arr, 0, arr.Length)
MS.Position = 0
Dim stream As System.IO.Compression.GZipStream
stream = New System.IO.Compression.GZipStream(MS, System.IO.Compression.CompressionMode.Decompress)
Dim temp As System.IO.MemoryStream
temp = New System.IO.MemoryStream()
Dim buffer As Byte() = New Byte(4096) {}
While (True)
Try
Dim read As Integer
read = stream.Read(buffer, 0, buffer.Length)
If (read <= 0) Then
Exit While
Else
temp.Write(buffer, 0, buffer.Length)
End If
Catch ex As Exception
notCompressed = True
Exit While
End Try
End While
If (notCompressed = True) Then
stream.Close()
Return temp.ToArray()
Else
Return temp.ToArray()
End If
End Function
Thanks & Regards Manoj

Audit- Not laoding Audit data into Audit tables

Hi ,
Audit data not loading into audit tables in my XI3.1 SP4Environament.
Audit data base is in SQL SERVER 2008 R2
where Audit database congigured , audit events enabled properly.
and also log files creating without any errors also
Please help me ..
Edited by: Reddeppa Konduru on Nov 9, 2011 11:31 AM
Edited by: Reddeppa Konduru on Nov 9, 2011 12:31 PM

I am getting below error
bsystem_impl.cpp:2651: TraceLog message 1
2011/11/09 03:22:47.071|>>|A| |13664|9368| |||||||||||||||assert failure: (.\auditsubsystem_impl.cpp:2651). (false : Next event id value should be greater than the current one, check the auditee packing events code).

Approval audit data in OIM

Similar Messages

Maybe you are looking for