Audit Logs for Administrators

Hello
How can we audit the Site Administrators or Farm admins when changing site Settings or enabling Features on the web applications or Site Collection level? the Site Collection Audit Logs Does Not
Yasser

Hi,
There isn’t anything like site collection auditing for administrative events like feature activations etc. This info will however be in the ULS if the logging level is set high enough. Obviously there are downsides of a high logging level - lots
of noise in the logs, logging location will get filled up quickly.
Cheers
Matt

Similar Messages

Audit logs for tables

Dear all,
I have a requirement of implementing audit logs for tables to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
I am using database 9.2.0.3.
thanks in advance.

Hi,
After I turn on audit trail on the database sever and issue DML statment. I have found nothing in the audit table.
1) Set "audit_trial" = true in teh init.ora file
2) Run the $ORACLE_HOME/rdbms/admin/cataudit.sql
3) Connect sys/password by sysdba and issue the following command:
- AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY APPS BY ACCESS;
Do I need to re-set the database after step 1? or I have made some wrong.
Thanks.

Audit logs for read operation on tables

I have a requirement of implementing audit logs for tables on read / select operation in addition to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
thanks in advance

Hi,
yes there are many ways you can audit the Source database according to your requirments. as you need to audit the select , insert etc you can audit in many ways
1) By implementing policies , (i.e) FGA , or statement policy on a given table or a given user.
2) you can also do the required task by implementing the alerts on specific conditions like select on a specifc table etc
you can use these utileties from AV console.
Regards.

SQLException in the audit log for the Message Display Tool

Hi
I´m newbie in PI Technology, and i have some issues when i try to do the next.
This is the scenario:
I need to communicate two systems, for one side i have SAP, and for the other side i have ADI (legal system) so, i use PI to do this (the communication), PI receive the data from SAP by means abap proxy, until this everything is correct, then i do the mapping of the data and i send a message to ADI (with the SAP XI Runtime Workbench) by means JDBC adapter, if i check the sended message with "Message Display Tool" show that the message was sent (status "Delivered") but if i check the received messages option, in the audit log displays the five next errors:
Error: Could not execute statement for table/stored proc. "FADIA4" (structure "StatementFADIA4") due to java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: JDBC Message processing failed, due to Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: MP: exception caught with cause com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: Adapter Framework caught exception: null
Error: Delivering the message to the application using connection JDBC_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation..
if there are somebody that maybe could know what is the problem?, could the problem be the side of the legal system?, because inside of PI when i do the Test Configuration in the Integration Directory, the end of the test is successful.
Any comment is well received!!
Thanks,
Vicman
P.D. sometimes the error is: java.sql.SQLException: Token ) was not valid. Valid tokens: DAY PATH YEAR LABEL MONTH OPTION RESULT CONNECTION TRANSACTION.
what does it means?

Hi Pooja,
thanks for you quickly response!
XML sended:
<?xml version="1.0" encoding="UTF-8"?>
<ns0:MT_PgDocVentaECC_req xmlns:ns0="http://gmodelo.com/ECC/enviarCobranza">
   <DT_DatosDeControl>
      <MIDDLEWARE_ID/>
      <QUICK_ID/>
      <INTERFACE_NAME/>
      <MESSAGE_ID/>
      <LOG_ID/>
      <USER_ID/>
      <SOURCE_SYSTEM/>
      <TARGET_SYSTEM/>
   </DT_DatosDeControl>
   <DT_PagoDocVentaECC>
      <VKORG>TVKO</VKORG>
      <VKBUR>TVBUR</VKBUR>
      <VKBUR1>TVBUR</VKBUR1>
      <ROUTE>TVRO</ROUTE>
      <ROUTE1>TVRO</ROUTE1>
      <BLART>Q</BLART>
      <BELNR>100</BELNR>
      <WRBTR>200</WRBTR>
      <LFART>100</LFART>
      <VBELN>100</VBELN>
   </DT_PagoDocVentaECC>
</ns0:MT_PgDocVentaECC_req>
this is the XML received:
<?xml version="1.0" encoding="UTF-8"?>
<ns1:MT_PgDocVentaADI_req xmlns:ns1="http://gmodelo.com/ADI/recibirCobranza">
<StatementFADIA7>
<FADIA7action="INSERT">
<Table>FADIA7</Table>
<Access>
<NUMCIA>123</NUMCIA>
<NUMALM>234</NUMALM>
<SUBALM>300</SUBALM>
<CVETOP>16</CVETOP>
<FOLOPV>22</FOLOPV>
<SECOVA></SECOVA>
<IMPOVA>200</IMPOVA>
<ALMOVA>5678</ALMOVA>
<SUBOVA>21</SUBOVA>
<TOPOVA>21</TOPOVA>
<FOPOVA>41</FOPOVA>
<FECOVA>100</FECOVA>
<STSOVA> </STSOVA>
</Access>
</FADIA7></StatementFADIA7>
</ns1:MT_PgDocVentaADI_req>
what do you think about it?, anything wrong?

Audit log for document library

Hi All,
I have a requirement to generate a report for a document library which contains confidential “Policies”
documents, this library exist under sub site. Now my clients wants a log report, which should give information like Who accessed/download/modified document?
Please guide me
MercuryMan

You need to first enable menu audit log reports SharePoint 2010. Please follow the given below steps.
1. Site Action > site settings
2. Site collection features
3.Click on the reporting features
4.Search for the Reporting feature
4.Click on Activate button
Otherwise, you could try automate solution named Lepide Auditor for SharePoint (http://www.lepide.com/lepideauditor/sharepoint.html) which assists to generate report and and provides the
auditing data into real time. It gets real time alerts on detecting changes to users, groups, lists, libraries, folder and permission etc.
Lepide - Simplifying IT Management

Unable to get Audit logs for Data Mining Model Oracle11g

Hi All, I followed all the steps given below 2 links but not getting any audit logs.
http://download.oracle.com/docs/cd/B28359_01/datamine.111/b28130/install_odm.htm#DMADM024
http://download.oracle.com/docs/cd/B28359_01/datamine.111/b28130/schemaobjs.htm#sthref233
Made sure the audit_trail is set to DB.
SQL cmds and its output shown below
SQL> AUDIT GRANT,AUDIT,COMMENT,RENAME,SELECT ON mining model NB_SH_Clas_sample;
Audit succeeded.
SQL> COMMENT ON MINING MODEL NB_SH_Clas_sample IS 'i am here';
COMMENT ON MINING MODEL NB_SH_Clas_sample IS 'i am here'
ERROR at line 1:
ORA-03113: end-of-file on communication channel
Process ID: 31648
Session ID: 135 Serial number: 114
SQL> quit
Please help me if i have left out any step
Thanks in Advance

Hi.
Please take a look at the other concurrent thread on model object auditing for more detailed information. If you have Oracle support, please file a TAR with Metalink (http://metalink.oracle.com).
Regards, Peter.

Security Audit Log for XI IB

Hello,
on the ABAP Stack it is possible to activate the security audit log, to log activities on certain objects/functions. Is there also a possibilty to do this for the JAVA-Stack.
We have for legal reasons to log, want users are doing on the productive XI system. E.g. we wanna log if someone is changing the value mapping or configurating the adapter.
Regards, Werner

Hi,
chk out these links
Audit Log
http://help.sap.com/saphelp_me21sp2/helpdata/en/23/c9833b3bb1780fe10000000a11402f/content.htm
regards
jithesh

Security audit log for the last 30 days?

Hi,
My current settings for the security audit log is 20 MB (by default). I dont want to control it with file size limitation, but by the no. of days the audit is recorded (max 30 days).
What are the parameters that I would need to maintain?
Or any additinal config is required?
Thanks,
Abdul

Hi,
My current configuration is like this:
Name                Description                                           Current value                                            System default value
FN_AUDIT     Name of security audit file          audit_++++++++
DIR_AUDIT     Directory for security audit files     /usr/sap/GSP/DVEBMGS00/log     /usr/sap/GSP/D00/log
rsau/enable     Enable Security Audit          0
rsau/max_diskspace/local     Maximum space for security audit file     300M     20M
rsau/max_diskspace/per_day     Maximum size of all security audit files per day          0
rsau/max_diskspace/per_file     Maximum size of one single security audit file          0
rsau/selection_slots     Number of selection slots for security audit          2
rsau/user_selection     Defines the user selection method used inside kernel functions          0
I have just activated the audit, and in just 30 minutes, I can see that the file is about 45MB. If this is the growth rate, the 300MB allocated for audit will completely used in just a day.
My requirement is - I want to track users and their activities for the last 30 days (or 45 days). No log should be overwritten unless it is atleast 30 days old.
In SM20, when I give selection from 1.1.10 to 31.1.10, it should show me all the activities during this period, without any breaks.
Other doubts: Do I have to start auditing manually every day? Or will it keep writing logs until it reaches 300 MB which can spread upto multiple days.
Regards
Abdul
Edited by: Abdul Rahim Shaik on Feb 4, 2010 11:17 AM

Failed to save admin audit log for this cmdlet invocation.

HI, I have a co-existence of exchange 2010 and 2013SP1. We are in the process of user mailbox migration from old to new exchange. When we try to configure auditing we get the below message
[PS] C:\Windows\system32>Set-AdminAuditLogConfig -AdminAuditLogEnabled $True
WARNING: The arbitration mailbox 'SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}' for the organization '' is
located on a server that doesn't have Exchange 2013 installed. The arbitration mailbox must be moved to an Exchange
2013 server before you can enable auditing.
WARNING: The command completed successfully but no settings of 'Admin Audit Log Settings' have been modified.
However as per below arbitration and system mailbox are already moved to new exchange.
[PS] C:\Windows\system32>Get-Mailbox -Arbitration | FL Name,DisplayName,ServerName,Database,AdminDisplayVersion
Name                : SystemMailbox{1f05a927-0bf4-475d-b944-392523e3cf54}
DisplayName         : Microsoft Exchange Approval Assistant
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name                :
SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}
DisplayName         : Microsoft Exchange
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name                : FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042
DisplayName         : Microsoft Exchange Federation Mailbox
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name                : SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}
DisplayName         : Microsoft Exchange
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name                : Migration.8f3e7716-2011-43e4-96b1-aba62d229136
DisplayName         : Microsoft Exchange Migration
ServerName          : auh2mbx02
Database            : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
How can we fix this??

Try running
setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms
from the Exchange 2013 distribution again.
If that doesn't fix it, delete the mailbox database and run the setup command again.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Audit Log for HRP Infotypes

Hi,
Just like PCL4 for PA Infotypes, do we have a mechanism to check the changes done to HRP Infotypes?
Thanks,
Suryakiran

Pl check this <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/db/7a2a40ce93185de10000000a1550b0/frameset.htm">SAP Help</a> on maintaining log for PD infotypes..
~Suresh

Audit Log for user

Hi,
Is there a way we can trace the activity or the Transaction Codes accessed by a user? We want to trace on a past date (ie June transactions).
Thank you and best regards.
Rachelle

Hi Rachelle,
You probably posted on a wrong forum. Are you using SAP Business One ? If not, please close your thread.
Thanks,
Gordon

Scheduling audit logs - variant for RSAU_SELECT_EVENTS

Hi,
I need some help as to how I should go about creating a variant for scheduling the audit logs using RSAU_SELECT_EVENTS as a weekly job.
I would like the job to run on a weekly basis (run on Sun) and to generate SM20 audit logs for that past week. For example, the job is to be executed (every) Sunday night (say, 22 Nov) and it will extract all logs between the previous Sun (15 Nov) thru to the current Sun (22 Nov).
My question is : how should the variant for the program "RSAU_SELECT_EVENTS" be created?
In this program, there's a "Time Restriction" section of "From Date" and "To Date". If I were to input 15 Nov (From Date) to 22 Nov (To Date) and schedule it weekly, then every week it is always going to extract the logs between 15 Nov and 22 Nov regardless of which Sun it was run - which is not correct.
How should the variant be created such that it will always extract the current past week?
I doubt this program can be used to achieve my requirements. Is there an alternative?
Thanks !

> I doubt this program can be used to achieve my requirements.
I raise your bet by 1 beer that it can...
=> When saving the variant, scroll along to the end of the selection options to a field called Selection Variables. Place your cursor in the date fields and press F4.
Do the same for the Name of the Variable field (tip: "-7")
Cheers,
Julius

Audit Log persistence

Hi Everybody,
I am using Message monitoring to see the processing of the messages.
When I click on the details of the message I see Audit Log is deleted but I can see the message payload.However I could see the audit log for new messages trigerred now.
Is there any setting to retain the audit log or anything to do with archiving and deletion?
Can somebody help me out on this?
Helpful answers will be rewarded points.
Thanks,
Zabiulla

Hi,
You have not mentioned the nature of your interfaces but then giving you the answer for both type of sync and asysn interfaces.
Asynchronous messages are always persisted in the runtime persistence layer, whereas synchronous messages can only be persisted if errors occurred or for logging purposes in the Integration Engine. Only successfully processed asynchronous messages in the persistence layer can be archived or deleted. Messages with errors are never automatically deleted, but only manually by administrators.
Rgds
joel
For any other doubt feel free to ask.

Audit log in communication channel monitoring(MDT)

Hi,
I am doing a soap lookup in my message mapping for an interface.In order to monitor the request and response communication , I am unable to see the 'Audit Log' for the soap communication channel that was configured for the same.On clicking the message id for viewing the audit log,an error page is displayed as "Requested Page not found"
Could you please help me as to why I am unable to see the Audit Log.
Regards
Janice

Hi! Janice,
Could you guide me as to where I can set the parameter for sync logging in AE
You can got to
1) T Code: SXMB_ADM
2) Click Integration Engine Configuration
3) Again click Configuration
4) Now Keep the parameter as TRACE_LEVEL = 3 instead of 0 or 1 or 2.
then again go to SXMB_MONI there you can view now SOAP Request and Response.
I hope now it is resolved right
Regards
Amar Srinivas Eli

Search-MailboxAuditLog is empty - Mailbox Audit Logging not working in Exchange 2013 CU6 environment

Hello,
i activated Mailbox Audit Logging for Admin, delegate and owner with all supported operations (update, delete, etc..)
like mentioned here:
http://exchangeserverpro.com/using-exchange-server-2013-mailbox-audit-logging/
But also two days later (and also one Server reboot later) search-MailboxAuditLog is still empty.
any ideas how to fix this?
Best,
martin

Hi S.Nithyanandham,
i looked up the mailboxfolderstatistics. There are items in the folder:
[PS] C:\Windows\system32>Get-MailboxFolderStatistics mailboxname |where{$_.Name -like "*audit*"}
RunspaceId : a95e32b8-93c3-4330-8d42-45cade9d64d4
Date : 18.09.2014 16:35:20
Name : Audits
FolderPath : /Audits
FolderId : LgAAAADmBpGVdb8iQp3F89WOcmcHAQBpQNFODkTESLeLj74B887wAAAAAAESAAAB
FolderType : Audits
ItemsInFolder : 147
DeletedItemsInFolder : 0
FolderSize : 434.2 KB (444,649 bytes)
ItemsInFolderAndSubfolders : 147
DeletedItemsInFolderAndSubfolders : 0
FolderAndSubfolderSize : 434.2 KB (444,649 bytes)
OldestItemReceivedDate :
NewestItemReceivedDate :
OldestDeletedItemReceivedDate :
NewestDeletedItemReceivedDate :
OldestItemLastModifiedDate :
NewestItemLastModifiedDate :
OldestDeletedItemLastModifiedDate :
NewestDeletedItemLastModifiedDate :
ManagedFolder :
DeletePolicy :
ArchivePolicy :
TopSubject :
TopSubjectSize : 0 B (0 bytes)
TopSubjectCount : 0
TopSubjectClass :
TopSubjectPath :
TopSubjectReceivedTime :
TopSubjectFrom :
TopClientInfoForSubject :
TopClientInfoCountForSubject : 0
SearchFolders :
Identity : mailboxname\Audits
IsValid : True
ObjectState : New
What do you think?
why cant i search and find these entries the auditlog?
best,
martin

Audit Logs for Administrators

Similar Messages

Maybe you are looking for