Audit Logs only show ID essadmin

We have a planning application with two databases. There are times that I'd like to know who kicked off a business rule or loaded data. When I view the application log, every entry is made with the essadmin ID. Is there any other kind of auditing we can do?

Hi,
When planning communicates with essbase it uses the admin account that is defined in the datasource setup.
To find out who ran business rules and at what time etc then have a look for hbrlaunch.log, if you are on windows it will be in C:\windows\system32
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

Usage Report and Audit Log report showing different totals

I am trying to understand the differences displayed in two similar reports. The first report is an 'Audit Log' Report and it is displaying the number of Resource Account creations over a time period. The second report is a Usage Report using the exact same criteria (objectType = Resource Account and Action = Create). The totals I get back are VASTLY different. Can anyone explain? Is this a known bug?

Hi,
In any report we don't show the storage policies information. In Cost report if the storage policies have different rate factors then we will show the split for the storage information. But in usage report , rate factors will not be applicable as we don''t show the cost details. Hope this clarifies your question. Please let us know if you need more information.
Thanks,
Lakshmi

Firewall logging only showing object group names

Hey guys,
We are having out logs from the firewalls sent to a syslog server, however the issue is that when the logs get sent for a specific group of IP's we're not seeing the IP addresses we're seeing the name of the object group.
Is there a way to turn this off? We'd like to see the IP addresses and not the object group names.
Thanks,
BR

Hi,
Are you sure the names you are seeing are "object-group" names? I can't remember seeing logs messages that mention "object-group" names. Might be mistaken though.
Can you share some log messages?
One possibility is that you are actually seeing names configured with the "name" configuration command
You can check those with the command
show run names
If you would like to disable that IP/name pairing you can issue the command
no names
It should not remove the original "name" configurations but rather toggle (disable) the view setting
- Jouni

HT5463 my phone log also shows the call that made it through only called once...shouldn't it have shown twice?

iphone 5 issue with DO NOT DISTURB feature. Feature is ON, allowing FAVORITES to be able to call, I RECEIVED A TELEMARKETING CALL THAT BYPASSED THE SETTING as my phone log only shows they called once and the phone rang and I answered. Shouldn't the phone log show they called twice? Otherwise I have to consider this another failure by Iphone 5.

Here's an update. I just did the Disk Utility tests, of basically all the elements that appear on the left of the window (3 available selections), including the Macintosh HD one. They all passed the verifying and repairing processes, no warnings or errors whatsoever. Yay. The point is, yesterday I was looking at my photos from the Finder. I wasn't doing anything at all, really, not even moving the cursor, when I suddenly heard the HDD making the working-noise without stopping, just that constant scratchy noise. This went for something like 7 seconds straight, and at the very next moment, it started making a consecutive and tempoed stream of this same sound, but a little bit less intense, with interlapses of about a sec. This continued for about a whole minute. I'd like to know if things are really fine.
As I previously described, the guys at iShop almost don't want me there anymore, or at least that's what their distanced attitudes get my into thinking. I visited the place some days ago, to look at the new iPod Touch pretty quickly, and I clearly felt that the guards were watching me closely, you know, with a hostile mannerism, the kind of stance that you use, with arms folded, to look kind of intimidating. I really didn't do anything to deserve that paranoic and ridiculous behavior. What happened was, a bit hottened discusion with the manager, when I was telling him I needed a replacement, and he really wasn't giving me an empathetic and understanding attitude.
If a call to Apple Support is required soon, and my computer needs to be repaired or the HDD replaced, they'll most likely send me there, since it's the most prominent place of recommendation. Sincerely speaking, they do seem like the most prepared personel, and they aren't great per se. If that is so, I really, really hope that the hard drive is the only part or detail that needs some technical considering, and deserves my stress.
Thanks for your consideration, so far so good.

False Positive Audit Logs?

Is it possible to get this log when running the audit for a mailbox and in fact the non-owner (user2) didn't accessed the mailbox?
If I look under event logs I cannot find any cmdlet event adding Full Access to user1
I deleted all events
Checked that user2 has no full access for user1 mailbox
... but still from time to time I see under audit that user 2 accessed user1 inbox as delegate! How is that possible?
Operation                : FolderBind
OperationResult       : Succeeded
LogonType               : Delegate
ExternalAccess         : False
FolderPathName       : \Inbox
ClientInfoString        : Client=MSExchangeRPC
ClientIPAddress        : *******
ClientMachineName   :
ClientProcessName    :OUTLOOK.EXE
ClientVersion            :14.0.6025.1000
InternalLogonType    : Owner
MailboxOwnerUPN     : user1 @ domain
MailboxOwnerSid       : *******
DestMailboxOwnerUPN:
DestMailboxOwnerSid  :
DestMailboxGuid          :
CrossMailboxOperation :
LogonUserDisplayName: User 2
LogonUserSid             : *******
SourceItems              : {}
SourceFolders            : {}
ItemId                      :
ItemSubject              :
DirtyProperties          :
OriginatingServer      : MailServer (14.01.0438.000)
MailboxGuid              : *******
MailboxResolvedOwnerName : User1
LastAccessed            : 05/01/2014 10:00:00
Identity                    : ******
IsValid                     : True

Hi,
Firstly, I’d like to explain, we can delegate the viewer access and open other user’s inbox or other folder:
http://office.microsoft.com/en-in/outlook-help/allow-someone-else-to-manage-your-mail-and-calendar-HA010075081.aspx
Thus, please check if there is send on behalf permission of mailbox folder permission.
Additionally, the Logon Type in audit log only has Owner, Delegate and Admin. And any access from other user will be recorded in the log:
http://technet.microsoft.com/en-us/library/ff459237(v=exchg.141).aspx
Thanks,
Angela Shi
TechNet Community Support

Mailbox auditing log search only shows last 7 days

I have mailbox auditing turned on for a mailbox, and the audit log age limit is set to 90 days. When I run the non admin user access report however it only shows me auditing items for the past 7 days. If i go to powershell, and run search-mailboxauditlog
it shows the same 7 days. Any suggestions?

http://technet.microsoft.com/en-us/library/ff459237(v=exchg.150).aspx
Mailbox audit logs are generated for each mailbox that has mailbox audit logging enabled. Log entries are stored in the Audits subfolder of the audited mailbox Recoverable Items folder. This ensures that all audit logs are available from a single location,
regardless of which client access method was used to access the mailbox or which server or workstation an administrator used to access the mailbox audit log. If you move a mailbox to another Mailbox server, the mailbox audit logs for that mailbox are also
moved because they're located in the mailbox.
By default, mailbox audit log entries are retained in the mailbox for 90 days and then deleted. You can modify this retention period by using the
AuditLogAgeLimit parameter with the
Set-Mailbox cmdlet. If a mailbox is on In-Place Hold or litigation hold, audit log entries are only retained until the audit log retention period for the mailbox is reached. To retain audit log entries longer, you have to increase the retention period by
changing the value for the AuditLogAgeLimit parameter, or export audit log entries before the retention period is reached.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

I have a new Pc and installed Itunes, plugged in my Ipod, logged into Itunes, but it only shows some of my music. How can I take the music from my Ipod to Itunes? do I sync my ipod, or will that only sync Itunes songs and I will loose what is on my Ipod?

I have a new PC, I have downloaded Itunes, logged in and plugged in my Ipod. How do I make sure that all my music moves from my Ipod to Itunes? Currently it is only showing what I have purchased from Itunes on Itunes, not my entire library.

backup from old computer and restore to new either to icloud or an external drive also check out turingtest2's excellent article on backup using synctoy

I have deleted my photos but have icloud. when i log into icloud it doesnt give me an option to view these photos at all. my photo stream is only showing photos from another iphone in the house. i am unsure if i do a restore from back up if this will work

I have deleted my photos but have icloud. when i log into icloud it doesnt give me an option to view these photos at all. my photo stream is only showing photos from another iphone in the house. i am unsure if i do a restore from back up if this will work. i really dont want to lose these photos but i am very unsure of what to do to resolve. can anyone please help?
thank you

If you had Photo Stream enabled with your iCloud account settings on the iPhone, photos in the Camera Roll should have been transferred to your photo steam automatically when the iPhone was connected to an available wi-fi network.
Your photo stream is not available when logging in with your iCloud account with a browser on a computer.
Why were the photos in the Camera Roll deleted?
Photos/videos in the camera roll are included with your iPhones backup. If your iPhone's backup has not been updated since the photos were deleted from the camera roll, you can try restoring your iPhone from the backup.

Audit log is not showing any data GRC 10 PC

Hi,
when we are trying to execute the audit logs
under reports in process controls,not showing data and getting
error like no data matching the entere selec criteria.
do we need any configuration changes required
Thanks
GRC Admin

Hello,
check the table DBTABLOG if data contains or not,if no data then maintain the parameter rec/client in RZ11 and try the same
while executing the audit log need to maintain the time frame as HH:MM not HH:MM:SS
check the below link about DBTABLOG
Change Log Monitor Enabling by Table log Activation in SAP Production Environment - Governance, Risk and Compliance - SC…
Regards
Baithi

Universal Access only showing at log-in screen

For some reason Universal Access is only showing at log in on my school iMac. I have logged into the admin account and checked universal access, but it is turned off. It is giving me the little black box that tells me where my cursor is and what it does. For example at the log-in "Name" field it is surrounded in a black border and the black box says "You are currently on a text field. To enter text in this field, type."
Any help would be great.

Hi there,
Firstly make sure you have restarted your computer, and tried again.
Then complete these simple troubleshooting steps.
Let me know if they help, and if not, Ill get back to you with some further troubleshooting steps.
http://support.apple.com/kb/ht1379
http://support.apple.com/kb/ht3964

HT204150 I currently have 14,181 contacts that are on my computer, which an apple tech was nice enough to show me how to transfer all my contacts from my mac 2 "iCloud " account all though when ever I log into my "iCloud" account it still only shows 13,0

I currently have 14,181 contacts that are on my computer, which an apple tech was nice enough to show me how to transfer all my contacts from my mac 2 "iCloud " account all though when ever I log into my "iCloud" account from a different web browser it still only shows 13,032. Meanwhile on my mac book pro, the "icloud" contact is still spinning like its trying to update the rest of the missing contacts. I have let the computer run for 2 days straight and still no progress. Is there a limit to how many contacts I store on "iCloud" I have upgraded to the extra 25 gigs per year. If anyone has any advice I would greatly appreciate it, because its also slowing down my mac book pro significantly causing it hard to do any other task on my computer....Any advice or help would be again greatly appreciated.

On the surface, it doesn't sound like you're reaching a limit in the number of contacts you can have.
I would first create a contacts archive (file >> export) for a backup. Then, go to system preferences >> icloud and uncheck contacts. Reboot. Return to those preferences and recheck contacts.
Also, review http://support.apple.com/kb/HT4489 just in case you have some contact cards that are reaching a different limitation.

500 Internal Server Error - Channel Monitoring Audit Log

Hi Experts,
We are facing an error in the 'Audit Log' of the communication channel monitoring of a File Sender Adapter.
The channel uses a custom written Java Module which uses XSLT parser internally. The audit log displays the following error:
500 Internal Server Error
Error: "Application error occurred during the request processing."
Troubleshooting Guide https://sdn.sap.com/irj/sdn/wiki?path=/display/jsts/home
Details: "The WebApplicationException log ID is [4698F300D2C40C2000000000000009AA]."
This error occurs both when the file is processed successfully or when in error. In case of a positive test case file, we can even see the message reaching Pipeline (SXMB_MONI). But only the audit log does not show the processed steps in the channel monitoring and displays the above error message.
We have even established that the cause of the error is Java Module (First, we executed by removing our custom Java Module from the module steps and the audit log showed the steps correctly. But by putting the module back in the channel, the error resumed).
Initially, the error was not coming and we were able to test this properly. But over the time the audit log error started. Now, we are not able to get rid of this even by restarting the channel or restarting the Java stack of the server.
To me, it seems like a memory issue in the Java Stack.
Any thoughts?
Can we find out where to find the details of the WebApplicationException log ID displayed above?
Thanks,
Sudheer

Hello,
This could be generic but may helo you:
500 Internal Server Errors
Description: The server encountered an unexpected condition which prevented it from fulfilling the request.
Possible Tips: Have a look into SAP Notes u2013 804124, 807000
Regards,
Caio Cagnani

Audit log output!!!!

Hi,
I have enabled object Auditing on our production Database.
Audit log destination i have given in OS level.(AUDIT_FILE_DEST='XXX')
In Audit log it is showing statement id only.
How can i know statement????
Below is the output of my database Audit log.
Thu Jun 26 11:48:10 2008
SESSIONID: "13194352" ENTRYID: "1" STATEMENT: "122" USERID: "SYSADM" ACTION: "103" RETURNCODE: "0" OBJ$CREATOR: "SYSADM" OBJ$
NAME: "PS_BUYER_TBL" SES$ACTIONS: "---------S------" SES$TID: "5682" OS$USERID: "fscmadm"
Thu Jun 26 11:49:33 2008
SESSIONID: "13194352" ENTRYID: "2" STATEMENT: "136" USERID: "SYSADM" ACTION: "103" RETURNCODE: "0" OBJ$CREATOR: "SYSADM" OBJ$
NAME: "PS_BUYER_TBL" SES$ACTIONS: "---------S------" SES$TID: "5682" OS$USERID: "fscmadm"
Thu Jun 26 12:59:35 2008
SESSIONID: "13194352" ENTRYID: "3" STATEMENT: "2941" USERID: "SYSADM" ACTION: "103" RETURNCODE: "0" OBJ$CREATOR: "SYSADM" OBJ
$NAME: "PS_BUYER_TBL" SES$ACTIONS: "---------S------" SES$TID: "5682" OS$USERID: "fscmadm"
*******************************************************************************************

Hi Saagar,
Thanks for your responce!!!
the doc which u post is for 10g
But in mycase my database is 8.1.7
& i have enabled object level auditing
In my audit logs i am not getting SQL statements (See above output)
can u please tell me how to find SQL statements.

Audit log level

Hello there,
When i update an attribute to be multi-value in the schema section of DSCC, i want to see update in audit log. Now with default audit log level, i can see only the following but it does not show what attribute and what value is being modified. Is there audit log level i should set to ?
dn: cn=schema
changetype: modify
replace: modifiersname
modifiersname: cn=admin,cn=administrators,cn=dscc

Hi,
You hit defect 6997464 due to the fact in-memory schema entry is managed differently from the other entries.
Please contact your local Oracle support representative to get a relief if needed.
Regards
Sylvain

Can't enable mailbox audit logs

Hello!
I can't enable mailbox audit logs. I use cmdlet Set-Mailbox -Identity "mailbox" -AuditEnabled $true and Get-Mailbox shows that
audit is enabled. But when i check Get-Mailbox| Get-MailboxFoldersStatistics there is no "Audit" subfolder, and all audit searches also return no results.
I am working now with several Exchange installations (five actually, and one is brand-new test lab) and checked the same in each organization. Result was the same!
I am stronly sure i miss something important, could you point it to me?

Hi,
Please use the following command to check the Mailbox Audit Logging action setting.
Get-Mailbox –Identity “username” | fl name,*audit*
Are there any administrator, delegate, and owner actions in the audit logging configuration for that mailbox? Please post them to check this issue.
If the settings above are configured correctly, only the administrator, delegate, and owner actions specified in the audit logging configuration for the mailbox are logged. And the “Audits” folder will show up after the administrator, delegate,
and owner take the actions specified in the audit logging configuration.
By default, these actions in the audit logging configuration should be like this:
AuditAdmin       : {Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, FolderBind, SendAs, SendOnBehalf, Create}
AuditDelegate   : {Update, SoftDelete, HardDelete, SendAs, Create}
AuditOwner       : {}
By the way, which command do you use to search the audit log?
Mailbox audit logging procedures
https://technet.microsoft.com/en-us/library/ff461939%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396
Best Regards.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Lynn-Li
TechNet Community Support

Audit Logs only show ID essadmin

Similar Messages

Maybe you are looking for