Audit logs for read operation on tables
I have a requirement of implementing audit logs for tables on read / select operation in addition to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
thanks in advance
Hi,
yes there are many ways you can audit the Source database according to your requirments. as you need to audit the select , insert etc you can audit in many ways
1) By implementing policies , (i.e) FGA , or statement policy on a given table or a given user.
2) you can also do the required task by implementing the alerts on specific conditions like select on a specifc table etc
you can use these utileties from AV console.
Regards.
Similar Messages
-
Dear all,
I have a requirement of implementing audit logs for tables to insert,update,delete operations. Is there any way to achieve this since triggers are present only for insert,update and delete ?
I am using database 9.2.0.3.
thanks in advance.Hi,
After I turn on audit trail on the database sever and issue DML statment. I have found nothing in the audit table.
1) Set "audit_trial" = true in teh init.ora file
2) Run the $ORACLE_HOME/rdbms/admin/cataudit.sql
3) Connect sys/password by sysdba and issue the following command:
- AUDIT SELECT TABLE, UPDATE TABLE, INSERT TABLE, DELETE TABLE BY APPS BY ACCESS;
Do I need to re-set the database after step 1? or I have made some wrong.
Thanks. -
SQLException in the audit log for the Message Display Tool
Hi
I´m newbie in PI Technology, and i have some issues when i try to do the next.
This is the scenario:
I need to communicate two systems, for one side i have SAP, and for the other side i have ADI (legal system) so, i use PI to do this (the communication), PI receive the data from SAP by means abap proxy, until this everything is correct, then i do the mapping of the data and i send a message to ADI (with the SAP XI Runtime Workbench) by means JDBC adapter, if i check the sended message with "Message Display Tool" show that the message was sent (status "Delivered") but if i check the received messages option, in the audit log displays the five next errors:
Error: Could not execute statement for table/stored proc. "FADIA4" (structure "StatementFADIA4") due to java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: JDBC Message processing failed, due to Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: MP: exception caught with cause com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation.
Error: Adapter Framework caught exception: null
Error: Delivering the message to the application using connection JDBC_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error processing request in sax parser: Error when executing statement for table/stored proc. 'FADIA4' (structure 'StatementFADIA4'): java.sql.SQLException: FADIA4 in FILEMET not valid for operation..
if there are somebody that maybe could know what is the problem?, could the problem be the side of the legal system?, because inside of PI when i do the Test Configuration in the Integration Directory, the end of the test is successful.
Any comment is well received!!
Thanks,
Vicman
P.D. sometimes the error is: java.sql.SQLException: Token ) was not valid. Valid tokens: DAY PATH YEAR LABEL MONTH OPTION RESULT CONNECTION TRANSACTION.
what does it means?Hi Pooja,
thanks for you quickly response!
XML sended:
<?xml version="1.0" encoding="UTF-8"?>
<ns0:MT_PgDocVentaECC_req xmlns:ns0="http://gmodelo.com/ECC/enviarCobranza">
<DT_DatosDeControl>
<MIDDLEWARE_ID/>
<QUICK_ID/>
<INTERFACE_NAME/>
<MESSAGE_ID/>
<LOG_ID/>
<USER_ID/>
<SOURCE_SYSTEM/>
<TARGET_SYSTEM/>
</DT_DatosDeControl>
<DT_PagoDocVentaECC>
<VKORG>TVKO</VKORG>
<VKBUR>TVBUR</VKBUR>
<VKBUR1>TVBUR</VKBUR1>
<ROUTE>TVRO</ROUTE>
<ROUTE1>TVRO</ROUTE1>
<BLART>Q</BLART>
<BELNR>100</BELNR>
<WRBTR>200</WRBTR>
<LFART>100</LFART>
<VBELN>100</VBELN>
</DT_PagoDocVentaECC>
</ns0:MT_PgDocVentaECC_req>
this is the XML received:
<?xml version="1.0" encoding="UTF-8"?>
<ns1:MT_PgDocVentaADI_req xmlns:ns1="http://gmodelo.com/ADI/recibirCobranza">
<StatementFADIA7>
<FADIA7action="INSERT">
<Table>FADIA7</Table>
<Access>
<NUMCIA>123</NUMCIA>
<NUMALM>234</NUMALM>
<SUBALM>300</SUBALM>
<CVETOP>16</CVETOP>
<FOLOPV>22</FOLOPV>
<SECOVA></SECOVA>
<IMPOVA>200</IMPOVA>
<ALMOVA>5678</ALMOVA>
<SUBOVA>21</SUBOVA>
<TOPOVA>21</TOPOVA>
<FOPOVA>41</FOPOVA>
<FECOVA>100</FECOVA>
<STSOVA> </STSOVA>
</Access>
</FADIA7></StatementFADIA7>
</ns1:MT_PgDocVentaADI_req>
what do you think about it?, anything wrong? -
Unable to get Audit logs for Data Mining Model Oracle11g
Hi All, I followed all the steps given below 2 links but not getting any audit logs.
http://download.oracle.com/docs/cd/B28359_01/datamine.111/b28130/install_odm.htm#DMADM024
http://download.oracle.com/docs/cd/B28359_01/datamine.111/b28130/schemaobjs.htm#sthref233
Made sure the audit_trail is set to DB.
SQL cmds and its output shown below
SQL> AUDIT GRANT,AUDIT,COMMENT,RENAME,SELECT ON mining model NB_SH_Clas_sample;
Audit succeeded.
SQL> COMMENT ON MINING MODEL NB_SH_Clas_sample IS 'i am here';
COMMENT ON MINING MODEL NB_SH_Clas_sample IS 'i am here'
ERROR at line 1:
ORA-03113: end-of-file on communication channel
Process ID: 31648
Session ID: 135 Serial number: 114
SQL> quit
Please help me if i have left out any step
Thanks in AdvanceHi.
Please take a look at the other concurrent thread on model object auditing for more detailed information. If you have Oracle support, please file a TAR with Metalink (http://metalink.oracle.com).
Regards, Peter. -
Logging for SmartView operation
When I retrieve HFM data with SmartView on Excel spreadsheet, is there any log recording when the data retrieval begins and completed?
hi
i'd tru auditing tasks
find the information about auditing tasks bellow
Auditing Tasks
You can use the Task Audit feature to view the tasks performed by users. You can filter audited tasks by date range, application server, user, and task performed.
Note:
Only users assigned the Administrator role can perform a task audit.
These user activities are logged in the task audit:
Idle
Rules Load
Rules Scan
Rules Extract
Consolidation
Chart Logic
Translation
Custom Logic
Allocate
Data Load
Data Extract
Data Extract via HAL
Data Entry
Data Retrieval
Data Clear
Data Copy
Journal Entry
Journal Retrieval
Journal Posting
Journal Unposting
Journal Template Entry
Metadata Load
Metadata Extract
Member List Load
Member List Scan
Member List Extract
Security Load
Security Scan
Security Extract
Logon
Logon Failure
Logoff
External
Metadata Scan
Data Scan
Extended Analytics Export
Extended Analytics Schema Delete
Transactions Load
Transactions Extract
Document Attachments
Document Detachments
Create Transactions
Edit Transactions
Delete Transactions
Post Transactions
Unpost Transactions
Delete Invalid Records
Data Audit Purged
Task Audit Purged
Post All Transactions
Unpost All Transactions
Delete All Transactions
Unmatch All Transactions
AutoMatch by ID
AutoMatch by Account
IC Matching Report by ID
IC Matching Report by Acct
IC Transaction Report
The task audit log includes this information:
Username
Activity performed
Activity start time
Activity end time
Server name
Description
Current module
Note:
The Task Audit feature is available only in the Financial Management Web user interface.
The task audit log information is stored in a table (APPNAME_TASK_AUDIT). You can back up or extract the information in the table. You should monitor the log size and clear it on a regular basis.
To perform a task audit:
Select Administration, then Task Audit.
Note:
You must have an application open for the Task Audit link to be available.
Optional: You can filter the audit by selecting criteria:
Enter a start date and an end date.
Tip:
Click to select dates from a pop-up calendar.
From the Server Selection list, select a server, or select All.
From the User Selection list, select the user to audit, or select All to audit all users.
From the Task Filter list, select the task to audit, or select All to audit all tasks.
Click View.
The tasks that meet the filtering criteria are displayed. Tasks are sorted from most recent to least recent, as shown in this example.
Optional: To export the audit information to a CSV file, click Export, and follow the download instructions.
Optional: To delete the entries from the log, click Clear Log to delete the entries from the log.
Note:
When you clear the log, a record of the clear remains in the log and cannot be erased.
regards
alex -
Failed to save admin audit log for this cmdlet invocation.
HI, I have a co-existence of exchange 2010 and 2013SP1. We are in the process of user mailbox migration from old to new exchange. When we try to configure auditing we get the below message
[PS] C:\Windows\system32>Set-AdminAuditLogConfig -AdminAuditLogEnabled $True
WARNING: The arbitration mailbox 'SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}' for the organization '' is
located on a server that doesn't have Exchange 2013 installed. The arbitration mailbox must be moved to an Exchange
2013 server before you can enable auditing.
WARNING: The command completed successfully but no settings of 'Admin Audit Log Settings' have been modified.
However as per below arbitration and system mailbox are already moved to new exchange.
[PS] C:\Windows\system32>Get-Mailbox -Arbitration | FL Name,DisplayName,ServerName,Database,AdminDisplayVersion
Name : SystemMailbox{1f05a927-0bf4-475d-b944-392523e3cf54}
DisplayName : Microsoft Exchange Approval Assistant
ServerName : auh2mbx02
Database : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name :
SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}
DisplayName : Microsoft Exchange
ServerName : auh2mbx02
Database : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name : FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042
DisplayName : Microsoft Exchange Federation Mailbox
ServerName : auh2mbx02
Database : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name : SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}
DisplayName : Microsoft Exchange
ServerName : auh2mbx02
Database : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
Name : Migration.8f3e7716-2011-43e4-96b1-aba62d229136
DisplayName : Microsoft Exchange Migration
ServerName : auh2mbx02
Database : EXHDB01
AdminDisplayVersion : Version 15.0 (Build 847.32)
How can we fix this??Try running
setup.exe /PrepareAD /IAcceptExchangeServerLicenseTerms
from the Exchange 2013 distribution again.
If that doesn't fix it, delete the mailbox database and run the setup command again.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." -
Audit log for document library
Hi All,
I have a requirement to generate a report for a document library which contains confidential “Policies”
documents, this library exist under sub site. Now my clients wants a log report, which should give information like Who accessed/download/modified document?
Please guide me
MercuryManYou need to first enable menu audit log reports SharePoint 2010. Please follow the given below steps.
1. Site Action > site settings
2. Site collection features
3.Click on the reporting features
4.Search for the Reporting feature
4.Click on Activate button
Otherwise, you could try automate solution named Lepide Auditor for SharePoint (http://www.lepide.com/lepideauditor/sharepoint.html) which assists to generate report and and provides the
auditing data into real time. It gets real time alerts on detecting changes to users, groups, lists, libraries, folder and permission etc.
Lepide - Simplifying IT Management -
Hello,
on the ABAP Stack it is possible to activate the security audit log, to log activities on certain objects/functions. Is there also a possibilty to do this for the JAVA-Stack.
We have for legal reasons to log, want users are doing on the productive XI system. E.g. we wanna log if someone is changing the value mapping or configurating the adapter.
Regards, WernerHi,
chk out these links
Audit Log
http://help.sap.com/saphelp_me21sp2/helpdata/en/23/c9833b3bb1780fe10000000a11402f/content.htm
regards
jithesh -
Security audit log for the last 30 days?
Hi,
My current settings for the security audit log is 20 MB (by default). I dont want to control it with file size limitation, but by the no. of days the audit is recorded (max 30 days).
What are the parameters that I would need to maintain?
Or any additinal config is required?
Thanks,
AbdulHi,
My current configuration is like this:
Name Description Current value System default value
FN_AUDIT Name of security audit file audit_++++++++
DIR_AUDIT Directory for security audit files /usr/sap/GSP/DVEBMGS00/log /usr/sap/GSP/D00/log
rsau/enable Enable Security Audit 0
rsau/max_diskspace/local Maximum space for security audit file 300M 20M
rsau/max_diskspace/per_day Maximum size of all security audit files per day 0
rsau/max_diskspace/per_file Maximum size of one single security audit file 0
rsau/selection_slots Number of selection slots for security audit 2
rsau/user_selection Defines the user selection method used inside kernel functions 0
I have just activated the audit, and in just 30 minutes, I can see that the file is about 45MB. If this is the growth rate, the 300MB allocated for audit will completely used in just a day.
My requirement is - I want to track users and their activities for the last 30 days (or 45 days). No log should be overwritten unless it is atleast 30 days old.
In SM20, when I give selection from 1.1.10 to 31.1.10, it should show me all the activities during this period, without any breaks.
Other doubts: Do I have to start auditing manually every day? Or will it keep writing logs until it reaches 300 MB which can spread upto multiple days.
Regards
Abdul
Edited by: Abdul Rahim Shaik on Feb 4, 2010 11:17 AM -
Hello
How can we audit the Site Administrators or Farm admins when changing site Settings or enabling Features on the web applications or Site Collection level? the Site Collection Audit Logs Does Not
YasserHi,
There isn’t anything like site collection auditing for administrative events like feature activations etc. This info will however be in the ULS if the logging level is set high enough. Obviously there are downsides of a high logging level - lots
of noise in the logs, logging location will get filled up quickly.
Cheers
Matt -
Minimum timeout for read operation in PCI-6052E.
Hi,
I am running an application at 600Hz where I must read data from a deice using the PCI-6052E. Running at 600Hz, i.e Ts=1/600 second, my read timeout in the DAQmxReadAnalogF64 function must be < Ts. Although, the application starts fine after few reading cycles, the application crashes with a DAQmx error:
"DAQmx Error: Measurements: Specified operation did not complete, because the specified timeout expired.".
knowing that the PCI-6052E can operate at 1Khz rate, taht is T=0.001, I find it wired that it is crashing for timeout I am using Tout=0.7*Ts whic is > than T.
What is the minimum timeout required?
Thanks.
Elias
"A man can succeed at almost anything for which he has unlimited enthusiasm."Hi,
Timeout specifies the amount of time in seconds to wait for
samples to become available. If the time elapses, the VI returns an error and
any samples read before the timeout elapsed. The default timeout is 10 seconds.
If you set timeout to -1, the VI waits indefinitely. If you set timeout to 0,
the VI tries once to read the requested samples and returns an error if it is
unable to.
By available we refer to the data that has been acquire by
the card and placed into the buffer. You are doing a on sample at a time and
that you are not using the onboard clock. Since you are not using the onboard
clock you don’t have determinism on the rate at which you acquire the samples. “I
think by default the 6052E clock is 1KHz”, incorrect if you select your timing
as on “sample on demand” the rate is controlled by your “timed loop” but since
you are not in a Real Time OS you don’t control the rate of the loop, at least
at very high rates, you may run the first couple of iteration at one speed, then something happens on your PC and you CPU load increases, changing the rate of the while loop.
You have two options to set the rate you can do a software
timed operation (i.e. like you are doing right now), but it will be depended on
your OS and your CPU load or you can do a hardware acquisition where an onboard
clock controls the rate of the acquisition.
“I do not expect this to happen especially that the
PCI-6052E device used in doing the reading operation can run up to 1 KHz. I am
not sure what the problem is.” The problem here is that is not the 6025e not
been able to keep up is your computer. Look at the examples in: C:\Documents
and Settings\All Users\Documents\National Instruments\NI-DAQ\Examples\DAQmx
ANSI C\Analog In\Measure Voltage\ and let me know if they help.
You can post your code and I will lok at it if you want
I hope it helps
Jaime Hoffiz
National Instruments
Product Expert
Digital Multimeters and LCR Meters -
Hi,
Just like PCL4 for PA Infotypes, do we have a mechanism to check the changes done to HRP Infotypes?
Thanks,
SuryakiranPl check this <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/db/7a2a40ce93185de10000000a1550b0/frameset.htm">SAP Help</a> on maintaining log for PD infotypes..
~Suresh -
How to save change log for a particular standard table in ZTABLE
Hi Experts,
Wouldlike to make one ztable in R3 which should record changes made( say particualr field) in standard SAP DB table ( say TXPDAT). I think that there has to beway to do it.
Could you please share the way to achieve it?
Will appreciate a quick reply.
Thank you
Best RegardsHi,
or else do like this...
In order to maintain the log changes the main pre reuisite is to checkmark the checkbox in dataelement of table filed.
To do this...
goto transaction SE11>enter ur table name>cleck on fields tab>cleick on dataelement->click on Furthercharacterstics tab-->select the checkbox'Change Document'.
If u dont select dis the u cannot see the log entry of the particuylar field..Do like this for each dataelement for each table field...selecting all the fields is not mandatory..u can choose the table field u want to see the log report..
Once u done with dat...
Goto SCDO transaction> click on create>give a name change doc startwith Z or Y only>Follow the prodedure and in-->name of table field>enter u r TABLE NAME->click on individual field checkbox.--->insertentries..
Once u done with dis..
Goto SE16->enter CHDIR or CDPOS->press ENTER->enter u r object id>F8
U can see the new and old value of a table entry..... -
Oracle Migration Tool giving Access denied error for Read operation
Hi;
Oracle Migration tool is giving access denied error when we are trying to Read a record for Access Profiles.
We are getting (SBL-ODS-50085) error.This is happening only for few records(Access Profiles).
Although the user role is administrator having full access and privilege (Manage User and Access checked).
Pl. help me resolve the issue.
Thanks!Hi,
Does it happen when you try to read "any" Access Profile?
If yes, please have a look at the
"Admin: Users and Access Controls - Manage Users and Access - Manage Users and establish User Quotas. Define Access Profiles, Roles and Groups to manage data access controls." privilege in the role of the user you use for migration.
In order to avoid any problem, I usually create a "Migration" role temporarily and assign this role ALL the privileges to avoid such failures at the time of export.
Hope this helps,
Best regards,
Charles DUBANT.
http://www.dubant.com/ -
Hi,
Is there a way we can trace the activity or the Transaction Codes accessed by a user? We want to trace on a past date (ie June transactions).
Thank you and best regards.
RachelleHi Rachelle,
You probably posted on a wrong forum. Are you using SAP Business One ? If not, please close your thread.
Thanks,
Gordon
Maybe you are looking for
-
When i crop a video using FCE, how can i export just the selection?
When using the cropping tool with FCE 4, say i just crop out a single square from near the top of the video. if i were to export this video now, the new video would consist of the cropped out selection surrounded by black. is there anyway i can expor
-
HP Officejet Pro L7780 All-in-One Will Not Print Blue Ink - It Prints Pink Instead
HP Officejet Pro L7780 All-in-One - Issue: Blue ink will not print (It prints the color pink instead.). Actions taken: 1. Cleaned ink heads. 2. Replaced ink cartrige. 3. Reinstalled software. Sugestions by HP customer service: Purchase a new print
-
JDev3.0's JSP and Applet works on NT but doesn't work on Win98, why?
JDeveloper3.0 works fine on WindowNT machine when I run JSP files and Applet, but at home the JDeveloper3.0 cannot trigger the browser to display the result on my Windows98 machine when I run the JSP files or Applet. Why? How can I make it works for
-
hello there, there is a rare window that keeps popping up every time i start Logic. It's a "tempo" window with strange layout about midi effects and so,.... is it normal? How can i improve this? Thanks.
-
How to set a session in Java Filter?
I make a filter,in this filter,I check a request parameter,if this parameter equals a assigned name,I put a flag into a session,like follows: public void doFilter(ServletRequest request,ServletResponse response,FilterChain chain) throws IOException,S