User Audit Report not showing all details

Question

Hello,
I've encoutered a strange problem with the users audit reports.
After I assign a user with a few new roles I expect to get the following information in Audit Event Details:
In the "Changes" area, there should be a table with the following columns: Attribute, Old Value, Attempted Value and New Value that indicates the changes I've made.
Instead, I get something like this:
"Changes Old Values=Role A, Role B, Role C. New Values = Role A, Role B, Role C, Role D..."
Since the desciprion is too long it usualy ends with "..." and does not show the complete information.
All Successes and All Failures are marked in the Audit Configuration.
What else am I missing? I am using IdM 8.1.
Regards,
R

Answer 1

It seems that there is a default limit of 4000 characters worth of Attribute changes logged. If the attribute changed string is longer than 4000 chars long it is truncated.
If you look at the create database tables script used when you set up he repository tables BEFORE installing IdM you will see that in the logs table definition there is a comment suggesting that if 4000 chars is not enough for attribute changes, you may use a CLOB to hold the data. (we use Oracle DB)
In my opinion this isnt really publicised well enough.
Furthermore, It also seems that you have to modifiy a setting maxLogAcctAttrChangesLength in the RepositoryConfiguration configuration object. Again not so well known.
To be honest, I have not been brave enough to change this AFTER we have installed IdM and have used it for a period. I have no idea what consequences there may or may not be if a database table definition is changed... instinct tells me its not good.
GF