Audit in MaxDB

Hi,
There is a way to audit data changes in a MaxDB instance, and save a history of what was changed?
Regards
Clóvis

Hi Lars,
nice to see you again too, and i'm happy you still have patience to reply open source users.
I think that here i will have same problem you explain as Netweaver,(i know nothing about Netweaver, only the name) since in my application i use same connection for different users, that connections are taken from a pool, then maybe audit with triggers isn't a option, and i cant set in Connection what is the current system user, right?
then the better approach is to make that audit system in my persistence layer, where i know what is the user, and what objects are inside that transaction.
regards
Clóvis

Similar Messages

Auditing with MaxDB

Hello MaxDB Fans,
is it possible to create a auditing with MaxDB? We are in a high security enviroment and we need looging all access to the databases. This should be traced in a file (User XY has drop a table with sqlcli or shutdown a instance with dbmcli)
Thanks for you answer.
Martin

Hello,
you could audit all DML comands using INSERT, UPDATE and DELETE triggers.
For auditing a shutdown you could use the DBM event dispatcher or check the log files of the database.
regards
Wolfgang

MaxDb with timinig restrictions?

Hello community,
are there any timing restrictions to using MaxDb in a test environment? We have a license key from the SAP License Auditing Services. Can we use MaxDb the same time? If there are any restrictions, how can we detect the experience date from the MaxDb?
Thanks for answer.
Cheers
Stefan
Edited by: Stefan Schnell on Feb 27, 2008 11:33 AM

Hi Stefan,
there is no expiredate or a restriction of any kind in MaxDB.
You can use it as long as you like and as often as you like.
You can even use it for your own development and use it at your customers.
There is also no "community", "basic" or "enterprise" edition. When you use MaxDB you get all the functionality. You can use as many CPUs and memory as you can afford and put as much data in as you find
You always get the "full deal" - no stripped down, restricted testversion.
KR Lars

Does AccAD require MaxDB?

The installation guide for AccAD states that "This installation will automatically install a MaxDB server, which stores audit information and user sessions."
Is MaxDB the only database available for this product? Are any other databases supported by SAP? Our preferred database is DB2.

Hi Jens,
actually there is no real way to replace MaxDB within AccAD. This is due to the software appliance approach with which we deliver AccAD - maybe the explanation in the [AccAD Landscape Slides|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/103b1118-f037-2c10-7da8-eb830ef961ff?QuickLink=index&overridelayout=true] (Slide 9 ff.) sheds some more light on this concept.
In a nutshell: with the software appliance we drastically reduce the admin effort since there is no need to take care of internal components such as the database. But of course the concept on the other hand side removes flexibility that you might be used to from other SAP products like installing the DB of your choice. One important remark is really that we don't have a real SAP application system that needs to be administered, but a rather network-oriented complementary offering, which does not persist any business critical data in the DB.
In case you have some concerns or issues with running the MaxDB as-is within AccAD, I would recommend that we set up a short call to discuss this in person and find a suitable approach. (just send an eMail to "Jana.Richteratsap.com")
Best regards
Jana
Edited by: Jana Richter on Jan 26, 2010 11:50 AM

MaxDB & SOX

Hi,
I need some information about SOX Certification and MaxDB. Does anybody know, what have to be implemented, or customized that MaxDB is SOX conform.
As I know, there is no auditing within the MaxDB as it is known within Oracle. On the other hand the User SAP<SID> is the only user which is able to make changes in the database. How is it possible to personalize this User. Is there a change to audit the activities of this User?
Is MaxDB a Database which can be used, if a company has to be SOX accredited?
Would be great, if somebody would be able to give me a hand.
Best Regards,
Fabian Reutter

Hi Fabian,
basically SOX requires that business data is properly used and that the system that keeps that data is also handled properly. (a short list of SOX requirements can be found <a href="http://www.dbazine.com/ofinterest/oi-articles/mcquade2">here</a>)
In SAP landscapes all this is (regardless what database system is used) ensured by what is called the BASIS component of NetWeaver platform (ABAP dictionary, 3-system landscape, Security, CCMS etc). It also features things as table logging, with which changes to business data are logged.
On the database layer of the SAP system there is a very simple but strict security setup: all application data can only be changed by the DB User that owns the SAP Schema (thats SAP<SID> for ABAP stacks and SAP<SID>DB for JAVA stacks).
It's not allowed to logon as this DB User to access or change the data. Technically this is hindered by the encryption of the logon password.
Anyhow, it's still possible to gain knowledge about these logon data and violate the data acess permissions.
To do so would be what is called: hacking into the system. A illegal activity. It requires DBA access to the database, network access to the database server, a malicious intend and in-depth knowledge about how to access the SAP data.
As SOX is not specifically about preventing system hacks at any means, but about the correct handling of business data, there is no reason why DBMS used for SAP systems should be a problem for a company that tries to get SOX certified.
MaxDB has no special auditing feature, that's correct. But in the default setup the SAP user is the ONLY user that can access it's data at all. Even DBA Users as control or superdba have no access to the data via the database interface. (that's even more locked up as in Oracle Installations where the SYSDBA user by default can access any table in the system!).
So with the right measures in place (access control to the database server, the dba tools, the db interface tools at all, organisational measures to doublecheck administrative access to the database etc.) there is no reason to see MaxDB weaker or more exposed to hacks than any other DBMS supported by SAP.
So, yes: among the other DBs supported by SAP, MaxDB can be used by companies that are SOX certified. In fact - SAP widely uses MaxDB itself. This portal is running on it.
Hope that helps a bit,
KR Lars

Error message when starting MaxDB instance

I am getting the following Error message when starting the MaxDB instance after a series of failed attempts at starting the DB Manager Backup for our PI 7.1 server.
"-24994,ERR_RTE: Runtime environment error
1,Cannot create ipc db directories for SID (OS error code 11000)"
Max DB version : 7.7.02
Does anyone have any specific pointers on where the issue could be.
Any help is greatly appreciated.
Regards,
Murali Narayanan

Hi gurus,
I'm a complete newbye searching the forums in order to decrypt what is inconsistent to me (I'm acting as a substitute for a real dba): a sapdb refusing any more connection due to an 'user space exhausted' issue.
I do not even know if/where some admin tool is/isn't installed - eventually, what to look for - onto the running demianapachetomcat framework. Actually, all I have been provided was: 1. call 'Henplus' (done); 2. connect this way (jdbc:sapdb://localhost/database&options) and 3. select, upgrade, delete what needed. Problem arises on point (2): connection resufed 'user space exhausted'.
My question is: this issue seems so similar to mine, how can one eventually check/modify this '/sapdb directory space'?
Thanks in advance for any (much appreciated) hint, and be patient about my English and newbyeness (?).
MaxM

Steps to troubleshoot and get past common problems with Audition

When you encounter a problem with Audition, the following steps are often useful for getting past the problem and/or determining the cause of the problem:
1. Hold down SHIFT while you launch Audition
     This overrides the preference files and launches Audition using the default settings.
2. Manually rename or delete the preferences folder
     Step 1 only overrides certain preference files, while others such as Workspace preference files, may be the cause of the problem. Depending on your OS, locate the "5.0" folder in the location below and rename it or delete it.
     Windows XP: C:\Document and Settings\<username>\Application Data\Adobe\Audition\5.0\
     Windows Vista/7: C:\Users\<username>\AppData\Roaming\Adobe\Audition\5.0\ *
     Mac OS X: ~\Library\Preferences\Adobe\Audition\5.0\ **
          * "AppData" may be a hidden folder. You can type it into the location bar, or enable "Show Hidden Files" in Windows.
          ** This is your user-level Library folder, not the system-level tree.
3. Check your Audition Log.txt file
     To enable a log file with CS 5.5, you must create an empty file in your preferences folder called "Audition Log.txt" using notepad, text edit, or any other editor. After you create this file, launch Audition and if it fails, open and/or share the log file for more specific information about what's happening.
4. Check the Operating System console or error log
     Both OS X and Windows can track application errors, and if the problem is occurring outside of the application code - a driver conflict, for example - then the OS error report may be more informative than what we can get from the application.
     OS X: launch /Applications/Utilities/Console.app   Clear the view, then launch Audition and note any error messages that appear.
     Windows: launch Control Panel > Administrative Tools > Event Viewer > Windows Logs > Application then launch Audition and note any error messages that appear.
5. Re-install Audition
     If at this point, nothing has resolved the issue or the error logs are inconclusive, it's a good time to uninstall Audition, reboot, and reinstall Audition.
6. Obtain the full crash dump and send it to the Adobe team
     So you've walked through all the above steps, you've disconnected any external hardware interfaces to rule out any device or driver conflicts, and you've exhausted the basic troubleshooting steps. Visit http://forums.adobe.com/thread/900619 and follow the steps for your OS that Charles has documented to best obtain a full crash memory dump for Audition, and send that to [email protected] with a description of the problem and the steps you've taken, and we'll take a look.

Firstly yes these are common problems and secondly hopefully they will be fixed with updated software 2.1 which is due for release this coming Firday!

Steps to empty SAPDB (MaxDB) log file

Hello All,
i am on Redhat Unix Os with NW 7.1 CE and SAPDB as Back end. I am trying to login but my log file is full. Ii want to empty log file but i havn't done any data backup yet. Can anybody guide me how toproceed to handle this problem.
I do have some idea what to do like the steps below
1. take databackup (but i want to skip this step if possible) since this is a QA system and we are not a production company.
2. Take log backup using same methos as data backup but with Log type (am i right or there is somethign else)
3. It will automatically overwrite log after log backups.
or should i use this as an alternative, i found this in note Note 869267 - FAQ: SAP MaxDB LOG area
Can the log area be overwritten cyclically without having to make a log backup?
Yes, the log area can be automatically overwritten without log backups. Use the DBM command
util_execute SET LOG AUTO OVERWRITE ON
to set this status. The behavior of the database corresponds to the DEMO log mode in older versions. With version 7.4.03 and above, this behavior can be set online.
Log backups are not possible after switching on automatic overwrite. Backup history is broken down and flagged by the abbreviation HISTLOST in the backup history (dbm.knl file). The backup history is restarted when you switch off automatic overwrite without log backups using the command
util_execute SET LOG AUTO OVERWRITE OFF
and by creating a complete data backup in the ADMIN or ONLINE status.
Automatic overwrite of the log area without log backups is NOT suitable for production operation. Since no backup history exists for the following changes in the database, you cannot track transactions in the case of recovery.
any reply will be highly appreciated.
Thanks
Mani

Hello Mani,
1. Please review the document u201CUsing SAP MaxDB X Server Behind a Firewallu201D at MAXDB library
http://maxdb.sap.com/doc/7_7/44/bbddac91407006e10000000a155369/content.htm
u201CTo enable access to X Server (and thus the database) behind a firewall using a client program such as Database Studio, open the necessary ports in your firewall and restrict access to these ports to only those computers that need to access the database.u201D
Is the database server behind a Firewall? If yes, then the Xserver port need to be open. You could restrict access to this port to the computers of your database administrators, for example.
Is "nq2host" the name of the database server? Could you ping to the server "nq2host" from your machine?
2. And if the database server and your PC in the local area NetWork you could start the x_server on the database server & connect to the database using the DB studio on your PC, as you already told by Lars.
See the document u201CNetwork Communicationu201D at
http://maxdb.sap.com/doc/7_7/44/d7c3e72e6338d3e10000000a1553f7/content.htm
Thank you and best regards, Natalia Khlopina

R3load EXPORT tips for 1,5 TB MAXDB Database are welcome!

Hello to ALL;
this post is addressed to ALL MAXDB-GURU's !!
I'v few questions to MAXDB Performance-Guy's for R3load Export on MAXDB!
(remark to my person:
I'm certified OS/DB migration consultant and have already done over 500 OS/DB migrations since 1995 successfully)
BUT now I'm face with following setup for Export:
HP- IA64 BL870c, 4 CPUu2019s Dual-Core + Hyperthreading activ (mean's 16 "CPU'S" shown via top or glance)
64 GB RAM, HPUX V11.31;
MAXDB 7.7.07
ECC 5.0; Basis/Aba 640.22
SAP-Kernel 640-Unicode Patch 381
8 sapdatas are configured on unique 200GB LUN's and VG's in HP-UX; on storage-side the 8 220GB LUN's are located on (only) 9 300GB-Disks with Raid-5 Level and within HP-UX each VG/LVOL is mirrored via LVM to a second desasterdatacenter (200m distance)
LOGFILES:
2 x 4 GB LUN Raid-1 on Storage and via LVM also mirrored to failover-center
MAXDB-Datasize: 1600 GB Overall and within this 1350 GB used, TEMPUsage about 25 GB !
MAXDB-Parameter-Settings
MAXCPUu2019s 10 (4 x IA64 QuadCore+Hyperthreading shows 16 Cores within top and galcne
Cache_SIZE= I/O Buffer Cache = 16 GB (2.000.000 Pages)
Data-Cache-HitRatio: 99.61%
Undo-Cache = 99,98%
the following sapnote for MAXDB Peformance and Migrations are well known and already processes
928037, 1077887, 1385089, 1327874, 954268, 1464560, 869267,
My major problem is the export-runtime with over 4 days on the first dry-run (6 R3load's running on Linux-APPL-Server), and 46h on second runtime, 6 R3loads running on DB-Server IA64)
the third trail-run was aborted by me after 48hours and 50% export-dump-space was written. In all 3 dry-runs, no more than approx 3.5GB DUMP-Space were written per hour!
My first question to all MAXDB-Guru'S: How can I influence/optimize the TEMP - Area in MAXDB?? I didn't find any hint's in SDN or SAPNOTES or MaxDB Wiki or google....As fare as I know, this TEMP area "resides" within MAXDB-datafiles, thus it's seperated on my 48 datafiles, spreaded over 8 LUN/VG/disks. But I see LESS throughput on disk's and MAXDB-Kernel uses only ONE of ten's cpu-cores (approx 80% - 120% of 1000%).
The throughput or cpu-usage doesn't change when I use 2 or 4 or 10 or 16 R3load' processes in parallel. The "result" is always the same: approx. 3,5 GB Export-Dump and 1 CPU MAX-DB Kernelprocess is used !
so the BIG Question for me: WHERE is the bottleneck ?? (RAID-5 Disk-LUNS mirrored with LVM ???)
on HP-UX scsi_queue_depth_length I'v increased default value from 8 to 32 to 64 to 128 --> no impact
2nd question:
I'v read OS-Note 1327874 - FAQ: SAP MaxDB Read Ahead/Prefetch, and we are running MAXDB 7.7.07.19! (MaxDB 7.8 is not suppored via PAM for IA64 640-UC-Kernel) and as far as I understood, this parameter will no HELP me on EXPORT with primary-key-sequence ! is this correct? THUS: which parameter HELPS for speeding up Export-Runtime?
MAXCPU is set to 10, but ONLY 1 of them is used??
so this post is for ALL MAXDB GURU'S!
who will be intrested to contriubte on this "high-sophisticated" migration-project with 1.5TB MAXDB-Database-size and ONLY 24h Downtime !!
all tips and hints are welcome and I will give us coninued updates to this running project until WE did a successfull migration job.
PS: Import is not yet started, but should be done within vSphere 5 and SLES 11 SP1 on MAXDB 7.8 ....and of yours in parallel to export with migration monitor, BUT again a challenge: 200km distance from source to traget system !!!
NICE PROJECT;
best regards Alfred

Hi Alfred,
nice project ... just some simple questions:
Did you open a message at SAP? Maybe you could buy some upgrade support, this could be usefull to get direct access to the SAP support...
Which byte order do you use? I know Itanium could use both. But it should be different, otherwise you would use a backup for the migration.
And the worst question, I do not even want to ask: What about your MAXCPUS parameter? Is it set to more than 1? This could be the problem why only one CPU is used.
Best regards
Christian

ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant

ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant.
- For old version 1.1.4 it can be reported for non-compliant, How can I generate report for this?
Thanks
Kosin Usuwanthim

It used to be in there (id 226635 is the last one with it); should I clean it up a bit and put it back with a bit more of a disclaimer?

How to open .AC3 files in Audition CS5.5

As the latest Adobe Audition 5.5 does not have the codec/plugin for opening .AC3 files, I need to download and install the latest QuickTime player for the required codec/plugin.
However, after installing the QuickTime Player, Audition 5.5 seemed to open the .AC3 file I've selected but the whole duration of the AC3 file is blank and has nothing in the waveform. I could not hear anything during the playback.
The fact is that when the AC3 file is playing through the Windows Media Player 12 with AC3Filter, the file can be heard and has no error.
Does anyone know the solution to this issue?

The D7000 was first supported in Camera Raw 6.3.
http://helpx.adobe.com/creative-suite/kb/camera-raw-plug-supported-cameras.html
CS5 shipped with Camera Raw 6.0 and is compatible through to Camera Raw 6.7
http://helpx.adobe.com/x-productkb/global/camera-raw-compatible-applications.html
Download and install Camera Raw 6.7 and you'll have D7000 Raw support
Win: http://www.adobe.com/support/downloads/detail.jsp?ftpID=5371
Mac: http://www.adobe.com/support/downloads/detail.jsp?ftpID=5372

5.1 Surround Export from Audition Gives "Header Error" in Premiere

Hello - I have a finished surround mix that has been exported to 5 mono stems that I need to use for a DVD. In Audition CC 2014 I created a new multitrack session and selected the, "Surround Stems for Video Master" template. I verified that all stems are playing on the audio meter and then selected Export / Multitrack Mixdown / Entire Session. In the export window I selected Wave PCM, 48000 Hz, 5.1, 16 Bit. The resulting file for the 2:15:00 project is 4.8 GB. It plays fine in Finder and VLC. When I try to import the 5.1 Wave file into Premiere CC 2014 I get an error that says, "The file cannot be opened because of a header error."
In Audition I have RF64 support selected. Is this possibly a file size issue being over 4 GB? If I set in and out points in Audition and use the same export settings the file imports into Premiere successfully. I need to use the full quality of the audio file when I export the Dolby AC3 file from Premiere so I do not want to compress this. Is there any setting that I can change in Premiere? Has anyone else had success importing a surround file that is larger than 4GB on a Mac?
Thank you!
Specs: iMac, 3.4 GHz Intel Core i7, latest OS, latest versions of Adobe CC (PP 8.0, Audition 7.0)

I've had the same issue. Export audio to a MOV or AVI file format in Audition or audacity. They are movie containers, but hold audio as well, and will get past the 4gb file size limit.
Unfortunately, you cannot export back out of Premiere to audition straight out. You will have to do one of the following to get it to work how you want:
1. Blade at several points along your initial clips, and then edit in audition (the new spare files will be in place and will work just fine).
2. Use the MOV or AVI audio to replace the audio in the session once you get there.
On the send back to premiere, you'll have to conform to MOV or AVI audio PCM. Its a bit more work than most are used to, as you'd expect it to "know" the file is too big, but it really cannot tell from the container. If a limit of a file is about an hour of audio at 96k32bit float, then they could hard limit that by seconds count, and switch to using MOV instead, which would still function normally, and they wouldn't have to do anything else. Or they could add support for W64 and larger formats.

Adobe Audition has encountered a problem and needs to close.

I have been using Audition 2.0 on this computer for quite some time and suddenly now when I open it, I get the cryptic error dialogue:
"Adobe Audition has encountered a problem and needs to close. We are sorry for the inconvenience. If you were in the middle of something, the information you were working on might be lost. For more information about this error, click here."
When I click for more information, it's something useless like:
AppName: audition.exe AppVer: 2.0.5306.2 ModName: unknown
ModVer: 0.0.0.0 Offset: 65726168
Nothing on my computer has changed. There are no viruses. I have not added any new audio plug-ins. I am completely up to date with all critical Windows XP SP3 updates and none have been downloaded and installed recently anyway.
I searched the knowledgebase and found a document that suggesting many things to try. I tried them all, including running the Windows hard disk "check disk" tool with options to fix file system errors and recover bad sectors. I also defragmented the hard drive. Lastly, I completely uninstalled Audition, then manually deleted any remaining files, including registry entries as suggested in another knowledgebase article.
I then re-installed Audition 2.0 and it did exactly the same thing! This it maddening. Now it gets even more interesting. I discovered that if I start up the
Adobe ExtendScript Toolkit that Adobe Audition installed also, then try to launch Audition from the toolkit, IT STARTS CORRECTLY! I can then close the toolkit and use it like normal. Weird work-around.
What the heck could possibly be going on? Anyone have any ideas? I've attached the error log file that is generated by the error but I doubt it will be of much help.
Thanks!
Steve in Chicago

stevefoobar2: I may have found a solution for you.
I had the same thing happen to me today. I was using Audition 2 this morning without any problems. But this afternoon, it started giving me the exact same error with no apparent reason. Nothing on my system had changed.
So I uninstalled it and installed Audition 3 in its place. Audition 3 continued to have the same problem that Audition 2 had, so we can assume that this is not something that was changed between versions.
But my attention was brought to the fact that you and I are both running Windows XP SP3 fully up-to-date. So I thought I'd try seeing it from the angle of a problem with Windows instead of Audition, and see if I didn't get a better result -
First, I logged on to Windows as Administrator. This may or may not be required, but you'll probably want to do it just in case (you'll see what I mean later). At this point, Audition still crashed the same way when I opened it, so I moved on to my next troubleshooting strategy -
Instead of opening Audition directly, I right-clicked the Audition icon and selected "Run as..." This may seem odd since I was already logged in as Administrator, but it proved to be the solution in my case.
In the "Run As" diolog, there are two main options: run as current user, or run as another user.
Since I was already logged in as Administrator, I could safely select the first option (run as current user). But here's the catch: selecting the first option allowed me to UNcheck the box underneath that says "Protect my computer and data from unauthorized program activity" (see the attached picture)
Audition opened without any problems when I did this.
This makes me think that one of the Windows security features suddenly decided to block something that Audition was trying to do, crashing the program in the process. By turning off this security feature, the problem was solved. And I only had to do it once. Every time afterwards, Audition has opened without any problems when I simply open it from my desktop. Perhaps Windows now remembers not to block Audition in the future.
However, I have not restarted my computer yet, or logged off as Administrator. You may need to tweak this solution if you plan to do either of these things. You may end up having to "Run as" Audition every time you restart your computer or log off. You may even need to select the SECOND option, and run the program as Administrator with the appropriate password.
Anyway, this was the only post I could find on Adobe.com concerning this problem, so I thought I'd post my solution in case it helped someone else.

Can I view video in analog form from Audition? and if so what version?

I am using Pro 1.5 and Audition 1.5 and I would like to use the multitrack audio out along with the (analog) video output to a projector. I can't see it in Audition and from reading I thought there might be a way to link PRO and AUD to get it done. Is there a way?

Well, you've found all I was hoping for you and better. Those upstarts over at Reaper... so much less programming overhead (and probably no free time either!). Hopefully Adobe will "catch up" someday, but one thing Reaper can't do is offer inter-program compatability between Premiere, Audition, etc. That's the sort of features that slow down direct-to-monitor previews but strenthen the larger picture.
Anyway, glad you found that and good success to you.

Audit Data in BI Publisher Standalone

Hi:
I'm trying to audit who/what/when BI reports are run and I've got the BI Publisher user from XDO_USER_NAME but I need to find out what report is being run. I don't know of an existing XDO parameter or anything else that has that. So I'm trying to set it in the .rtf file as a parameter and get that as an argument to a report trigger but it's not working. Assuming I have the parameter defined in the data template, the .rtf and the database package, what's wrong with the following format (or is it just not possible to do what I want to do?)?
Thanks
The parameter in the .rtf file is defined as:
<?param@begin:rpt_name;’”numUnsuccAuthnsDT.rtf”’?>And I see it in the report page by using
Report Name is: <?$rpt_name?>
<dataTrigger name="insertAuditData" source="BI_DataTemplateRT.insertAuditData(:rpt_name)"/>And the BI_DataTemplateRT package has a function:
FUNCTION insertAuditData(rpt_name varchar) RETURN BOOLEAN;

See the following blog posts from Kan:
http://blogs.oracle.com/xmlpublisher/entry/how_to_audit_and_monitor_bi_pu
http://blogs.oracle.com/xmlpublisher/entry/how_to_visualize_your_audit_da
http://blogs.oracle.com/xmlpublisher/entry/11_1_1_5_new

Audit in MaxDB

Similar Messages

Maybe you are looking for