Write to audit log from Axis Handler

Hi guys,
Using PI 7.11 SP 04 I have deployed the com.sap.aii.af.axisproviderlib.sda containing the libraries for Axis.
This is deployed fine and I can write my Handlers without trouble.
There is only 1 issue bugging me and that is the writing to the Adapter Audit Log. In SAP Note 1039369 FAQ XI Axis Adapter it is described how to write to the Audit log.
I can successfully write to the Channel monitor. But when I try to write to the Audit log data is still just written to the Channel monitor and not the audit log.
So what I have done is:
StatusAgent sa = (StatusAgent) getOption(Constants.MONITOR_AGENT_KEY);
Hashtable ht = getOptions();
ht.put("audit", Boolean.TRUE);
ht.put("pivoted", Boolean.TRUE);
sa.reportEvent(Status.OK, "This should be written to audit log but is written to channel monitor", ht);
sa.reportEvent(Status.ERROR, "This should also be written to audit log but is written to channel monitor", ht);
If i print the content of my hashtable in the channel monitor I can see that my entries are put into the table just fine. The 'audit' entry just seems to be completely ignored.
Anyone have and suggestions?
Regards,
Daniel

Hi Guys,
I need to know what JAR file i need to download for the following packages from SAP PI.
import com.sap.aii.axis.monitor.Status;
import com.sap.aii.axis.monitor.StatusAgent;
import com.sap.aii.axis.utils.Constants;
I am doing AXIS custom modules and i need to write to the PI 7.1 Audit Logs.
Thanks in advance.
Raj

Similar Messages

How to extract audit log from R/3 into BW

Hi, I have a request that how to extract audit log from r/3 into bw?
Is there any datasource or infocube I can use?

HI ,
Identify your Audit Log table and create generic data source for the same using rso2.
Regards
BVR

Get SM20 Audit Log from remote call.

Hi Experts,
I'm working with SAP JCo driver, I'd like to ask, is there any possibility to receive filtered Audit Log from SM20?
I couldn't find any BAPI or RFC interface, or information about specific table where information is stored.
Thanks in advance!
Best regards
Bartosz

Hi,
You can activate the internal audit system by setting the audit log parameters as described in the following table :
Audit Log parameter settings Audit Log Parameter Set value to...
rsau/enable 1
rsau/local/file path to audit log file
rsau/max_diskspace/local maximum space to allocate for the audit files
rsau/selection_slots 3
rec/client ALL
Thanks,
Hamendra

How to write to weblogic.log from JSP ?

It is possible to write some messages to weblogic.log from JSP?


Use weblogic.logging.LogOutputStream class to log messages into
          weblogic.log file.
          javap on weblogic.logging.LogOutputStream
          for e.g
          <%@ page import="weblogic.logging.*" %>
          <%
          LogOutputStream los = new LogOutputStream("TEST");
          los.error("Writing into Log file");
          %>
          Hope this helps.
          --kumar allamraju
          Mikhail Ershov wrote:
          > It is possible to write some messages to weblogic.log from JSP?

Fetching Audit log from sm20 tr-cd

Dear guys,
I am asking this question from quiet long time..
but no body replies with enough information....could somebody plz tell me,is this something vague job to do or my explanation is insufficient.?
i debugged the code at SM20 program too..but i could not observe the suitable FM to fetch audit log texts and put in Internal tableshortly.Even though i went thru SECU FGroup..saw audit log related FMs.
could somebody follow this post..i could reward points once i get answer for my question.
Thanks in advance.
ambichan

Hi,
You can activate the internal audit system by setting the audit log parameters as described in the following table :
Audit Log parameter settings Audit Log Parameter Set value to...
rsau/enable 1
rsau/local/file path to audit log file
rsau/max_diskspace/local maximum space to allocate for the audit files
rsau/selection_slots 3
rec/client ALL
Thanks,
Hamendra

Monitoring audit logs from solution manager

Hi All,
Is it possible to moniotor the audit logs of other systems from Solution manager system..?
If it can be done,please throw some light on that ..thanks

Can you please put some more info to the kind of monitoring you are looking for?. Is it on Security Audit log oor general Application Audit log?.
Regards,
Jagan

Write the Error log from background Job to the Spool request

Hi ,
I have a situation where in i need to capture the error log of a Z program which runs as a background job and write that log into the spool request. My Z program calls runs RSEINB00 program using the SUBMIT statement. When this Job fails the error log can be seen in SM37. But i need this error log to be sent in to a spool.
I can read the error log using the BP_JOBLOG_READ FM and can also create a spool using the RSPO_SPOOL_OPEN FM.
The problem is, when the Submit statement executes, due to internal valdation in the RSEINB00 program the program terminates. Due to this it is not able to perform the SY-SUBRC Check and thus doesn't read the log.
Can anybody suggest me how to overcome this problem. I am attaching the code for your refernece.
SUBMIT RSEINB00
       USING SELECTION-SET 'TEST2'
                       TO SAP-SPOOL
                       LIST NAME 'LOCL'
                       IMMEDIATELY space
                       KEEP IN SPOOL 'X'
       AND RETURN.
<b>If sy-subrc <> 0.</b>
             CALL FUNCTION 'BP_JOBLOG_READ'
              EXPORTING
                CLIENT                      = SY-MANDT
                JOBCOUNT                    = i_tbtco-jobcount
                JOBLOG                      = i_tbtco-joblog
                JOBNAME                     = i_tbtco-jobname
               TABLES
                 JOBLOGTBL                   = l_joblog
             IF SY-SUBRC <> 0.
             else.
                message i002 with l_joblog-msgv1.
             ENDIF.
<b>
ENDIF.</b>
Rgds,
Kewal
P.S. : any other approach to solve this problem will be appreciated too and the points will be rewarded suitably.

If I select a job in SM37 and I click on "spool" I get a list with separate spool entries for each of the steps, e. g.
Programmname/Kommand   Programmtyp   Spoolliste
Z_MM_STAT_UPDATE_WERK ABAP             1707445
ZSLEEP                 Ext. Kommando
Z_MM_STAT_UPDATE_WERK ABAP             1707459
ZSLEEP                 Ext. Kommando
Z_MM_STAT_UPDATE_MARA ABAP             1721423
ZSLEEP                 Ext. Kommando
Z_MM_STAT_UPDATE_WERK ABAP             1721437
Z_MM_STAT_UPDATE_MARA ABAP             1721446
Z_MM_STAT_UPDATE_WERK ABAP             1721447
Z_MM_STAT_UPDATE_VKORG ABAP             1721471
ZSLEEP                 Ext. Kommando
Z_MM_STAT_UPDATE_VKORG ABAP             1721521
ZSLEEP                 Ext. Kommando
Z_MM_STAT_UPDATE_VKORG ABAP             1721816
It's in German but I'm sure you get the idea. For each Z_MM_STAT_UPDATE and variant I have a separate spool list that I can display.
Markus

Audit Logs Empty in Communication Channel

Hi,
I am facing an issue in Channel Monitoring.I can see the messages are successful but nothing is displayed in Audit Logs.This is happening for both Receiver and Sender Channel.Earlier i could see the logs but it has started happening suddenly .
I am working on PI 7.1.Kindly provide help .

Hi Bhargav,
Check this note: 1436261
Reason and Prerequisites
Since PI 7.1, the audit log handling was changed, such that only audit logs which describe an error are persisted to the database. Audit Logs of type info are only kept in an in-memory cache per clusternode, and they get evicted according to a LRU strategy (details are explained in note 1314974).
There was an program error in the retrieval of audit logs from the memory caches of all cluster nodes, which led to the unavailability to monitoring of audit logs for messages which were processed on a different cluster node than the one on which the runtime workbench was executed.
Solution
To correct this problem, apply the patch matching your support package version as per the instructions in the NetWeaver Support Package Stack Guide.
PI 7.10
The archives and the Support Package Stack Guide can be found on the SAP Service Marketplace:
http://service.sap.com/netweaver --> SAP NetWeaver Process Integration 7.1 - Release-Specific Inf --> Support Package Stacks Information -->
7.1: SAP NetWeaver Process Integration 7.1
EhP1: SAP enhancement package 1 for SAP NetWeaver Process Integration 7.1
Please select the requested SP Stack.
Thanks,

Sm19 audit log

hi friends,
I have activated audit log and i can able to view log with SM20. But I have one doubt .......is that audit log occupies space in file system only (or) Database level only? or it occupies both? is it possible to get this audit log from any table? never mind please clarity my doubt.
thanks
nani

Hi,
Please check below link.
http://help.sap.com/saphelp_nw04s/helpdata/EN/03/37dc4c25e4344db2935f0d502af295/content.htm
Anil

Audit Logs failing to load

The Audit Logs in the Azure Portal are not working at all for me today. Is there a deployment going on right now? Is this affecting other people or just me?

Hi,
I have tried accessing the Audit Logs from my Subscription and it works.
I suggest you to try the below
Sign out and Sign in again and check if you are able to access
Try opening the Portal on a different Web Browser and check
Hope this helps !
Regards,
Sowmya

Protecting the Audit Log

How can Oracle be set up to protect against tampering with the audit log from a user with DBA privileges?

if in your env. DBA's also have access to OS files ( note oracle does not require that ), maybe you need to consider writing a cron job to keep polling from OS/DB audit trail and send it over to some remote archive.
Technically, the separation of duty is not fully in place because DBA could easily turn off auditing. you have to trust somebody to do the auditing. eventually the UNIX root user owns the machine and can even install a rogue oracle executable if the person is determined.

Java.util.logging: write to one log file from many application (classes)

I have a menuapp to launch many applications, all running in same JVM and i want to add logging information to them, using java.util.logging.
Intention is to redirect the logginginfo to a specific file within the menuapp. Then i want all logging from all applications written in same file. Finally, if needed (but i don't think it is), i will include code to write logging to specific file per app (class). The latter is probably not neccessary because there are tools to analyse the logging-files and allow to select filters on specific classes only.
The applications are in their own packages/jars and contain following logging-code:
        // Redirect error output
        try {
            myHandler = new FileHandler("myLogging.xml",1000000,2);
        } catch (IOException e) {
          System.out.println("Could not create file. Using the console handler");
        myLogger.addHandler(myHandler);
        myLogger.info("Our first logging message");
        myLogger.severe("Something terrible happened");
        ...When i launch the menuapplication, it writes info to "myLogging.xml.0"
but when i launch an application, the app writes info to "myLogging.xml.0.1"
I already tried to leave out the creation of a new Filehandler (try/catch block in code above) but it doesn't help.
Is it possible to write loginfo to same specific file?

You should open/close it somehow at every write from different processes.
But I personally prefer different file names to your forced merging, though.

Audit logs on Windows 2008 works different when file is modified from UNC path

Hello All,
Here i have a strange situation with the generation of audit logs when folders\files are changed locally(my computer) on the server (vs) from the UNC path
(\\servername\drive$\folder\....).
File Server : Windows 2008 R2.
Audting enabled and SACL set on the folder level.
Enabled advanced auditing for Audit Object Access and enabled the force sub category audit settings on vista \ window 2008 policy via GPO and also verified that the sub category is set.
also set SACL on one folder on the R drive. (\\servername\r$\<folder>\<audited folder>
auditpol /get /category:"Object Access"
Object Access : File System
Success and Failure
Situation : 1
When i make any manipulations (traversing \ listing \ adding or deleting folder or files) on the server locally from my computer ---> . r drive --> folder --> audited folder , i get the event id generated (4663) with all the correct
information.
For ex: created a new txt file.
Object: Object Server: Security, Object Type: File, Object Name: R:\Audits1\folder1\New Text Document.txt, Handle ID: 0xcb4
Process Information: Process ID: 0x1bac , Process Name: C:\Windows\explorer.exe
Access Request Information: Accesses: WriteData (or AddFile) AppendData (or AddSubdirectory or CreatePipeInstance) , Access Mask: 0x6
Situation : 2
When i make the same manipulations (traversing \ listing \ adding or deleting folder or files) on the server or remotely via the UNC path \\servername\r$\folder\audited folder or DFS share or \\servername\<sharename>
, i dont get the event id generated (4663) with the needed information.
For ex: created a new txt file.
Object: Object Server:
Security , Object Type:File ,
Object Name:
R:\Audits1\folder1\New Rich Text Document (3).rtf , Handle ID:
0xa3c
Process Information: Process ID: 0x4, Process Name:
Access Request Information:
Accesses: WriteData(or addfile), Access Mask: 0x100
In the second situation process name is empty (for the file events) and also found that the logs generated are very less compared to the first situation.
Please suggest if there is any fix with this.
Thanks,

Enable the following auditing on the server either through domain
policy or local policy:
Audit logon events - Success
Audit Object Access - Success
On the Auditing tab, add Everyone with the following audit settings.

Write multi-language entries to central Audit Log

Hi there!
For my custom XI adapter module, I need to write multi-language log entries to the RWB Audit Log. Therefore I created some resource bundle files with my message texts.
But at runtime of my module, I cannot know the language of the user, who accesses the log via his web browser.
Is there any possibility to provide custom resource bundle to the central audit log?
Thanks in advance!
Matthias

Matthias,
The idea behind using various resource bundles will work fine when you would detect the Locale of the user accessing RWB and load appropriate resource bundle. In most of the web applications based on Java this would be done automatically and you would not need to write exlplicit code for this but the Audit logs that you write from your adapter module would most probably be persisted to the database. At the most you would be able to persist the appropriate language messages by detecting the default locale in adapter module and retrieve values from corresponding resource bundle. Rest, your standard message display tool UI is automatically displayed in the appropriate language your browser sends to the server.
Hope this helps.
-- amol

How to write to windows event logs from determinations-server under IIS

This is just an FYI technical bit of information I wish someone had shared with me before I started trying to write OPA errors to the windows event log... Most problems writing to the windows event log from log4net occur because of permissions. Some problems are because determinations-server does not have permissions to create some registry entries. Some problems cannot be resolved unless specific registry entry permissions are actually changed. We had very little consistency with the needed changes across our servers, but some combination of the following would always get the logging to the windows event log working.
To see log4net errors as log4net attempts to utilize the windows event log, temporarily add the following to the web.config:
<appSettings>

<add key="log4net.Internal.Debug" value="true"/>
</appSettings>
<system.diagnostics>
<trace autoflush="true">
<listeners>
<add
name="textWriterTraceListener"
type="System.Diagnostics.TextWriterTraceListener"
initializeData="logs/InfoDSLog.txt" />
</listeners>
</trace>
</system.diagnostics>
To add an appender for the windows event viewer, try the following in the log4net.xml:
<appender name="EventLogAppender" type="log4net.Appender.EventLogAppender" >
<param name="ApplicationName" value="OPA" />
<param name="LogName" value="OPA" />
<param name="Threshold" value="all" />
<layout type="log4net.Layout.PatternLayout">
<conversionPattern value="%date [%thread] %-5level %logger [%property{NDC}] - %message%newline" />
</layout>
<filter type="log4net.Filter.LevelRangeFilter">
<levelMin value="WARN" />
<levelMax value="FATAL" />
</filter>
</appender>
<root>
<level value="warn"/>
<appender-ref ref="EventLogAppender"/>
</root>
To put the OPA logs under the Application Event Log group, try this:
Create an event source under the Application event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application
4.     Right-click the Application subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Close Registry Editor.
To put the OPA logs under a custom OPA Event Log group (as in the demo appender above), try this:
Create an event log in Registry Editor. To do this, follow these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the eventlog subkey, point to New, and then click Key.
5.     Type OPA for the key name.
6.     Right-click the new OPA key and add a new DWORD called "MaxSize" and set it to "1400000" which is about 20 Meg in order to keep the log file from getting too large.
7.     The next steps either help or sometimes cause an error, but you can try these next few steps... If you get an error about a source already existing, then you can delete the key.
8.     Right-click the OPA subkey, point to New, and then click Key.
9.     Type OPA for the key name.
10.     Close Registry Editor.
You might need to change permissions so OPA can write to the event log in Registry Editor. If you get permission errors, try following these steps:
1.     Click Start, and then click Run.
2.     In the Open text box, type regedit.
3.     Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog
4.     Right-click the EventLog key, select Permissions.
5.     In the dialog that pops up, click Add...
6.     Click Advanced...
7.     Click Locations... and select the current machine by name.
8.     Click Find Now
9.     Select both the Network user and IIS_IUSERS user and click OK and OK again. (We never did figure out which of those two users was the one that fixed our permission problem.)
10.     Change the Network user to have Full Control
11.     Click Apply and OK
To verify OPA Logging to the windows event logs from Determinations-Server:
Go to the IIS determinations-server application within Server Manager.
Under Manage Application -> Browse Application click the http link to pull up the local "Available Services" web page that show the wsdl endpoints.
Select the /determinations-server/server/soap.asmx?wsdl link
Go to the URL and remove the "?wsdl" from the end of the url and refresh. This will throw the following error into the logs:
ERROR Oracle.Determinations.Server.DSServlet [(null)] - Invalid get request: /determinations-server/server/soap.asmx
That error should show up in the windows event log, OR you can get a message explaining why security stopped you in "logs/InfoDSLog.txt" if you used the web.config settings from above.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa363648(v=vs.85).aspx
Edited by: Paul Fowler on Feb 21, 2013 9:45 AM

Thanks for sharing this information Paul.

Write to audit log from Axis Handler

Similar Messages

Maybe you are looking for