You are on page 1of 42

Auditing Reports

14

14

Auditing Reports Using auditing reports

Using auditing reports


If you are an administrator who wants to view reports from the auditing database, you have these choices: You can use the auditing reports that are included with BusinessObjects Enterprise. You can modify the auditing reports that are included with BusinessObjects Enterprise. You can create your own auditing reports.

Why are reports important?


Auditor includes reports that can answer questions you may have about your BusinessObjects Enterprise deployment. Each report contains one or more report sections that focus on a very specific area.

608

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Using auditing reports

14

Table 14-1: Questons Auditing can answer

Category

Question How many users are on my system?

Report Average Number of Users Logged In

What is the average session dura- Average Session Duration? tion What is the average session dura- Average Session Duration per user? tion per User From where are users logging into IP Addresses Accessmy system? ing My Cluster How many jobs were processed per Jobs per User user? User Information When was the last time a specific user used the system? Last Login for User

Who is using the system the most? Most Active Users (by refresh or by login) Number of logged in sessions How many users have used the system? Whose passwords have been modified? Who does not log out correctly? Number of User Sessions Number of Users in the System Password Modifications Users Who Logged Off Incorrectly

BusinessObjects Enterprise Administrator's Guide

609

14

Auditing Reports Using auditing reports

Category

Question

Report

What is the average time for docuAverage Refresh Time ments to refresh? Document Usage Analysis How often have documents been scheduled and viewed? Document Information Detail Document Scheduling and Viewing Status

Document Infomation

What are the 10 least viewed, edit- Least Accessed Docued, and refreshed documents? ments What are the 10 most viewed, edit- Most Accessed Docued, and refreshed documents? ments What are the most popular actions Most Popular Actions per document? per Document How often has an operation been performed on a document? How often have documents been published? Operations on Documents Publishing Auditing

What is the average session dura- Average Session Duration per cluster? tion per Cluster How many Job Services do I have? System InformaHow many jobs are there? tion Job Services on the System Job Summary

How many jobs were processed per Jobs per Job Service Job Service? Type How many audited servers do I have? Services in the Cluster

610

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Using auditing reports

14

Category

Question

Report

What are the most popular actions? Most Popular Actions How many users are accessing my system daily and when is the most Peak Usage popular time? Are my users editing reports or only Refresh and Edit Activirefreshing them? ty Impact Analysis What objects have had their rights Rights Modification changed? How many users are on my system? Total Users Logged In by Day

What is my users activity by month, User Activity week, day? What do the users do? User Activity per Session

Auditing report names


This section contains the following: the list of the report names the report sections included with the reports the report prompts

Note:

Folder path prompts will not automatically include objects/documents in subfolders below the selected folder. For example, selecting the folder toplevel will show results for all documents in the toplevel folder, but not for any objects/documents in the toplevel/sublevel folder. To see objects/documents in all subfolders, enter toplevel%.

BusinessObjects Enterprise Administrator's Guide

611

14

Auditing Reports Using auditing reports

Average Number of Users Logged In

The average number of sessions and users logging in over a given period of time.
Report sections Average Number of Sessions Users Logged In Average Number of Users Logged In Select a start and end date. Report prompts

Average Refresh Time

The average refresh time per document, user, or cluster over the specified time period.
Report sections Average Refresh Time by Document Average Refresh Time by User Average Refresh Time by Server Enter a folder path and document type, select a start and end date. Report prompts

Average Session Duration

The average duration of user sessions, broken down by year, quarter, month, week, day, or hour.
Report sections Year Quarter Month Week Enter User name, select a start and end date. Report prompts

612

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Using auditing reports

14

Report sections Day Hour

Report prompts

Average Session Duration per Cluster

The average duration of sessions for a cluster of servers, by year, month, week, or day.
Report sections Average Session Duration in Minutes per Year Average Session Duration in Minutes per Month Select a start and end date. Average Session Duration in Minutes per Week Average Session Duration in Minutes per Day Report prompts

Average Session Duration per User

The average duration of specific users' sessions, by year, month or week.


Report sections Average Session Duration in Minutes over the Year Average Session Duration in Minutes Select a start and end date. per Month per User Average Session Duration in Minutes per Week per User Report prompts

BusinessObjects Enterprise Administrator's Guide

613

14

Auditing Reports Using auditing reports

Cluster Nodes

The names of all servers in the audit cluster.


Report sections Servers in the Cluster Report prompts None

Document Information Detail

Provides details of actions performed on a given document.


Report sections Document Information Report prompts Enter document name and folder path, select a start and end date.

Document Scheduling and Viewing Status

The status of document jobs and views over a specified period of time.
Report sections Scheduleing Status Crystal Reports Viewing Status Web Intelligence Viewing Status Desktop Intelligence Viewing Status Enter folder path, select start and end date. Report prompts

IP Addresses Accessing My auditing Clusters

The IP addresses or machine names of clients accessing the audit cluster.

614

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Using auditing reports

14

Report sections IP Addresses Accessing My auditing Clusters by IP - Day IP Addresses Accessing My auditing Clusters by IP - Month

Report prompts

Select start and end date. IP Addresses Accessing My auditing Clusters by Name - Day IP Addresses Accessing My auditing Clusters by Name - Month

Jobs per Job Service

Number of jobs per server type, kind, or specific server.


Report sections Jobs per Job Server Kind- Summary Jobs per Job Server Kind Jobs per Job Service None Report prompts

Job Services on System

Number of job services on the system, and the duration of any jobs in seconds (optional).
Report sections Job Services Job Services and Duration of Jobs (sec) None Report prompts

BusinessObjects Enterprise Administrator's Guide

615

14

Auditing Reports Using auditing reports

Job Summary

Number of jobs on the system by status, or number of successfully completed or failed jobs over a given period. Report sections Report prompts

Jobs per Status Successful Jobs Failed Jobs Enter folder path, select start and end date.

Jobs per User

A summary of the number of jobs and their durations a user has initiated over a given period of time.
Report sections Jobs per User - Summary Jobs per User Select start and end date. Job Duration per User Job Failures per User Report prompts

Last Login for User

Last date and time to the second that a given user logged in to the system.
Report sections Last Login for User Report prompts Enter User name, select start and end date.

616

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Using auditing reports

14

Least Accessed Documents

Identifies the least popular documents by times read, edited or refreshed over a given period.
Note:

Documents that are never accessed it will not generate any events and not show up as part of this report.
Report sections Least Accessed Documents - By times Read Least Accessed Documents - By Edits Least Accessed Documents - By Refreshes Select document type and enter folder path, select start and end date. Report prompts

Most Accessed Documents

Most used documents based on times read, edited or refreshed over a given period.
Report sections Most Accessed Documents - By times Read Most Accessed Documents - By Edits None Most Accessed Documents - By Refreshes Report prompts

Most Active Users

A list of the system's most active users over a given period of time.

BusinessObjects Enterprise Administrator's Guide

617

14

Auditing Reports Using auditing reports

Report sections Most Active Users by Logins

Report prompts

Select start and end date. Most Active Users by Refreshes

Most Popular Actions

Quantity of the most popular actions during a given time period


Report Sections Most Popular Actions per Year Most Popular Actions per Quarter Most Popular Actions per Month Most Popular Actions per Week Most Popular Actions per Day Select start and end date. Report Prompts

Most Popular Actions per Document

Auantity of the most popular actions for a specified document during a given time period or by specified user.

618

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Using auditing reports

14

Report sections Most Popular Actions per DocumentBy User Most Popular Actions per DocumentBy Session Most Popular Actions per DocumentBy Action Most Popular Actions per DocumentBy Month

Report prompts

Select document name and enter folder path, select start and end date.

Number of User Sessions

Total number of user sessions for a cluster organized per year, month, week, and day.
Report sections by Month by Week by Day Select start and end date. Report prompts

Number of Users in the System

The number of users in the system at the time the report is run.
Report sections Report prompts

Number of Users in the System - Active None Users

BusinessObjects Enterprise Administrator's Guide

619

14

Auditing Reports Using auditing reports

Operation on Documents

The types of operations performed on specified documents, by time, type, user and document, or user.
Note:

Only document types that have generated auditing events will appear in the Document Type prompt dropdown.
Report sections Operation on Documents - By Time Operation on Documents - By OperaEnter user name, Document type and tion Type folder path, select operation and start Operation on Documents - By User and and end date. Document Operation on Documents - By User Report prompts

Password Modifications

A summary of password modification operations over a specified period of time.


Report sections Password Modifications - By Month Password Modifications - By Week Password Modifications - By Details Select start and end date. Report prompts

Peak Usage

Charts the peaks of user logins, session logins or number of actions performed over a given period of time.

620

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Using auditing reports

14

Report sections Users Login Peaks Session Login Peaks Number of Action Peaks

Report prompts

Select start and end date.

Publishing auditing

Publication activity for a specific document over a given period of time.


Report sections Publishing Auditing Report prompts Enter publication name, select start and end date.

Refresh and Edit Activity

Number of edit and refresh actions per document trace, per cluster, and per selected user over a given period.
Report sections Report prompts

Refresh and Edit Activities of Web In- Select user name, document name and telligence Documents folder path, select start and end date.

Rights Modification

A summary of security activities for a specified folder over a given period of time.
Report sections Rights Modification - By User Rights Modification - By Object Report prompts Select folder path, select start and end date.

BusinessObjects Enterprise Administrator's Guide

621

14

Auditing Reports Using auditing reports

Services in the Cluster Report sections Services in the Cluster Report prompts None.

Total Users Logged In by Day

A summary of the number of users or sessions logged in over a given time period, broken down by day.
Report sections Total Users Logged In by Day -Total Number of Logged In Users Select start and end date. Total Users Logged In by Day - Total Number of Logged in Sessions Report prompts

User Activity

Number of users using the system per month, week, or day within a given time period.
Report sections User Activity by Month User Activity by Week User Activity by Day Select start and end date. Report prompts

User Activity per Session

Analyses user activity for the whole content of the audit database per cluster, session, action, or date.

622

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Viewing sample auditing reports

14

Report sections User Activity per Session Per Cluster User Activity per Session Per Session User Activity per Session Per Action Name User Activity per Session Per Date

Report prompts

Enter user name, select start and end date.

Users Who Logged Off Incorrectly

Of the users who logged in during a given period, which ones failed to log off correctly.
Report sections Statistics Select start and end date. Users Who Logged Off Incorrectly Report prompts

Viewing sample auditing reports


To view sample auditing reports
1. 2. 3. 4. Log on to InfoView. Click Public Folders. Click Auditing Reports. Click the language folder of your choice. A list of sample auditing reports is displayed.

5. Open the report you want to view. To open a Web Intelligence auditing report, click on the report you want to view.

BusinessObjects Enterprise Administrator's Guide

623

14

Auditing Reports Creating custom auditing reports

To open a Crystal Reports auditing report, open the object package, and then open the report you want to view.

Creating custom auditing reports


This section contains information to help you understand the auditing database, the Activity universe and the information it records about auditing actions. With this information, you can use Crystal Reports, Web Intelligence or Desktop Intelligence to create custom auditing reports of user and system actions.

Auditing database schema reference


The auditing database contains six tables: Audit_Event on page 624 Audit_Detail on page 625 Server_Process on page 626 Detail_Type tables on page 628 Event_Type on page 627 Application_Type on page 628

The following diagram shows the schema of the auditing database.

Audit_Event
The Audit_Event table stores one record per action that is audited and contains general information about each auditing event.

624

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Auditing database schema reference

14

Field
Server_CUID

Description Server and service ID. Combined with the Event_ID to form the primary key for the Audit_Event table. A unique ID generated by the server to identify the auditing event. Combined with Server_CUID to form the primary key for the Audit_Event table. Name of user who performed the action. Time for start of action in UTC (Coordinated Universal Time) to the nearest millisecond. The time stamp is created by the server recording the action in its log file, and includes any correction necessary to synchronize with CMS time. You may want to correct this time to your local time zone when creating auditing reports. Duration, in seconds, of the action that is audited. Number that uniquely identifies the type of action the entry represents. Foreign key for the Event_Type table. Info Object CUID of object associated with the action. This number uniquely identifies an object such as a document, folder or user. Identifies the program that initiates the action, such as Web Intelligence, Desktop Intelligence, Crystal Reports, or Voyager. Field reserved for error codes.

Event_ID

User_Name

Start_Times tamp

Duration Event_Type_ID

Object_CUID

Object_Type

Error_Code

Audit_Detail
The Audit_Detail table records more details about each auditing action recorded in the Audit_Event table. For example, when a user logon fails, the reasons for that failure are recorded as auditing details.

BusinessObjects Enterprise Administrator's Guide

625

14

Auditing Reports Auditing database schema reference

There may be more than one record in this table for each auditing action recorded in the Audit_Event table.
Field Description Combination of the Server and Service CUID responsible for the event. Combined with the Event_ID and the Detail_ID to form the primary key for the Audit_De tailtable. A unique ID generated by the server to identify the auditing event. Combined with Server_CUID and the De tail_ID to form the primary key for the Audit_Detail table. The Detail_ID field is used to number the individual details associated with each auditing action (i.e. if there are two details associated with a particular auditing action, the first will have a Detail_ID of 1, and the second will have a Detail_ID of 2). Number that uniquely identifies the type of detail about the auditing action that the entry represents. Foreign key for the Detail_Type table. Information about the auditing detail being recorded. For example, if the Detail_Type_Description were "universe name", the detail text would contain the name of that universe.

Server_CUID

Event_ID

Detail_ID

Detail_Type_ID

Detail_Text

Server_Process
The Server_Process table contains information about the servers and services running within your BusinessObjects Enterprise system which can generate auditing events.

626

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Auditing database schema reference

14

Field

Description Combination of the Server and Service CUID of the server InfoObject that created the event. Primary key for the Server_Process table. Machine name of the server that produced the action. That is, the host name. A unique ID that identifies the type of application that generated the auditing action. Foreign key to the Applica tion_Type table. Name of the server and service that initiated the action. The names are the same as those displayed in the CMC. The default name is host name.servertype. Version of BusinessObjects Enterprise on server that produced the action.

Server_CUID

Server_Name

Application_Type_ID

Server_FullName

Server_Version

Event_Type
The Event_Type table contains a static list of the kinds of events that can be audited in your BusinessObjects Enterprise system. This table provides information roughly equivalent to that provided by AuditIDs and AuditStrings in Crystal Enterprise
Field Description Number that uniquely identifies the type of auditing event that the entry represents.

Event_Type_ID

BusinessObjects Enterprise Administrator's Guide

627

14

Auditing Reports Auditing database schema reference

Field
Event_Type_Description

Description Description of the type of auditing event.

Application_Type
The Application_Type table contains a static list of the applications that can produce auditing events.
Field Name Description A unique ID that identifies the type of application that generated the auditing action. The description of the application generating the auditing event.

Application_Type_ID

Application_Type_Description

Detail_Type tables
The Detail_Type table contains a static list of the standard details that can be recorded about audited events. For example, a user logon can fail for a number of different reasons. These reasons are listed as entries in the De tail_Type table. The information in the Detail_Type table is equivalent to the information that was recorded in variable AuditStrings in Crystal Enterprise 10. Field Description

Detail_Type_ID

Number that uniquely identifies the type of auditing detail that the entry represents.

628

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Field

Description

Detail_Type_Description

The description of the type of auditing detail generated by the auditing event.

Event and Detail reference tables


The following tables list the Event_Type_ID and Event_Type_Description of all events that can be audited in your system. For your convenience, these events are ordered according to the service that generates each type of event. The following table shows and example event.
Event Event Description ID Concurrent user logon succeeded. Concurrent user logon succeeded. Concurrent user logon succeeded. Concurrent user logon succeeded. Concurrent user logon succeeded. Concurrent user logon succeeded. Detail ID 42 Detail Description

Detail Text

65537

User Groups

Admin

65537

45

Session ID

1234

65537

60

IP address report123.456.101.100 ed by client Hostname reporthost.domain.com ed by client IP address resolved by server Hostname resolved by server 123.456.101.100

65537

61

65537

62

65537

63

host.domain.com

BusinessObjects Enterprise Administrator's Guide

629

14

Auditing Reports Event and Detail reference tables

Event Event Description ID Concurrent user logon succeeded.

Detail ID 89

Detail Description Concurrent user account

Detail Text

65537

juser

The following tables list the Event_Type_ID code for the event, the description, and any details that will be associated with that event followed by their Detail_ID codes in parenthesis.
CMS auditing events Event_Type_ ID Event_Type_Description Event Details (Detail_ID) Concurrent User Count (89) Hostname reported by client (61) Hostname resolved by server (63) IP address reported by client (60) IP Address resolved by server (62) Session ID (45) User Groups (42) Concurrent User Count (89) Hostname reported by client (61) Hostname resolved by server (63) IP address reported by client (60) IP address resolved by server (62) Session ID (45) User Groups (42) Concurrent User Count (89) Session ID (45) User Groups (42) Session ID (45) User Groups (42)

65537

Concurrent user logon suc- ceeded. Named user logon succeed- ed.

65538

65540

User logged off.

65541

User password has been changed.

630

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Event_Type_ ID Event_Type_Description

Event Details (Detail_ID) Enterprise Error Text (46 ) Hostname reported by client (61) Hostname resolved by server (63) IP address reported by client (60) IP address resolved by server (62) Logon using token (64) User Groups (42) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Object Type (50) Parent Document CUID (91) Session ID (45) User Groups (42)

65539

User logon failed.

65542

Object created.

Note: This auditing string will not be recorded when a new user account is created, even though a new folder is created for each new user. Object Folder Path (43) Object instance (90) Object Name (3) Object Type (50) Session ID (45) User Groups (42)

65543

Object deleted.

BusinessObjects Enterprise Administrator's Guide

631

14

Auditing Reports Event and Detail reference tables

Event_Type_ ID Event_Type_Description

Event Details (Detail_ID) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Object Type (50) Parent Document CUID (91) Session ID (45) User Groups (42)

65544

Object modified.

65545

Unresponsive scheduling. Object Folder Path (43) Object instance (90) Object Name (3) Object Type (50) Parent Document CUID (91) Session ID (45) User Groups (42)

65544

Object Rights Modified

Cache service auditing events Event_Type_ ID Event_Type_Description Event Details (Detail_ID) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Report Data Type (51) User Groups (42) Enterprise Error Text (46) Object Folder Path (43) Object instance (90) Object Name (3) User Groups (42)

196609

Report Viewing Succeeded.

196610

Report Viewing Failed.

632

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Job service auditing events

For scheduled objects (by clients or servers), the auditing messages give you information about the status of scheduled actions. For example, the auditing messages can tell you if a scheduled report ran successfully. For the Destination Job service, the auditing messages give you information on whether an object was sent to a destination, as requested by a user.
Event_Type_ ID Event_Type_Description Event Details (Detail_ID) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Universe name (2) User Groups (42) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Universe name (2) User Groups (42) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Template Document (91) Universe Name (2) User Groups (42)

327681

Job successful.

327682

Job failed.

327683

Job failed. Job will be retried by the CMS.

Note: For more information on scheduling jobs, see the BusinessObjects Enterprise Administrator's Guide.

BusinessObjects Enterprise Administrator's Guide

633

14

Auditing Reports Event and Detail reference tables

Event_Type_ ID

Event_Type_Description

Event Details (Detail_ID) Destination Delivery Type (66) Destination Type (65) Document Scope (81) Document size (9) Domain (71) File Name (68) From Address (73) Host Name (70) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Port (72) Publication Instance ID (82) Recipient Name (80) Template Document CUID (91) To Address (74) User Groups (42) User Name (69)

327687

Destination Delivery Succeed- ed

634

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Event_Type_ ID

Event_Type_Description

Event Details (Detail_ID) Destination Delivery Type (66) Destination Type (65) Document Scope (81) Document size (9) Domain (71) Error Message (76) File Name (68) From Address (73) Host Name (70) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Port (72) Publication Instance ID (82) Recipient Name (80) Template Document CUID (91) To Address (74) User Groups (42) User Name (69)

327688

Destination Delivery Failed

Event service auditing events Event_Type_ ID 262145 Event_Type_Description Event registered Event Details (Detail_ID) Event filename (41) Event ID (40) Event Filename (41) Event ID (40) Event filename (41) Event ID (40)

262146

Event unregistered

262147

Event updated

BusinessObjects Enterprise Administrator's Guide

635

14

Auditing Reports Event and Detail reference tables

Event_Type_ ID 262148

Event_Type_Description Event triggered

Event Details (Detail_ID) Event filename (41) Event ID (40)

Report Application service auditing events

The Report Application service (RAS) is used to create reports using custom applications developed with the RAS SDK. All of the following codes will be generated by custom applications. Consult your RAS SDK documentation for additional details.

636

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Event_Type_ ID

Event_Type_Description Report was opened for viewing and/or modification Note: In a few cases, this Event_Type_ID may be generated when the report opens but cannot be viewed. This may occur when: There are problems with the database setup for the report. For example, you may see this message when the database driver for the report is not present on the client machine A processing extension associated with the report aborts viewing, or fails. The report used Business Views and the user did not have permissions to refresh the underlying data connections. The machine running the RAS ran out of space in its temporary directory. Report was saved to the CMS. Report was created and saved to the CMS Report could not be opened. Report could not be saved to the CMS.

Event Details (Detail_ID)

458753

Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) User Groups (42)

458754 458755 458756 458757

BusinessObjects Enterprise Administrator's Guide

637

14

Auditing Reports Event and Detail reference tables

Event_Type_ ID 458758

Event_Type_Description Report could not be created in the CMS.

Event Details (Detail_ID)

Web Intelligence and Desktop Intelligence auditing events Note:

The list of auditable events for Desktop Intelligence and Web Intelligence Rich Client only apply when the client is actively logged in to BusinessObjects Enterprise. If the client is being use in an offline mode then events will not be recorded. If a document is imported to the Web Intelligence Rich Client and worked on as a local document, all auditing events regarding that document will be reported as Web Intelligence client events and contain the details (name, CUID etc.) of the locally saved version of that document, not the repository version. Repository events will be reported by the Web Intelligence Processing Server, and client events will be reported by the Adaptive Processing Server with Client Auditing Proxy Service enabled.
Event_Type_Description Event Details (Detail_ID) Number of elements (7) Session ID (45) User Groups (42) Description (14) Document name (8) Document size (9) Object Folder Path (43) Object instance (90) Object Name (3) Options Refreshed (17) Overwrite (18) Session ID (45) User Groups (42)

Event_Type_ ID

List of Universes Retrieved

Document Saved

638

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Event_Type_ ID

Event_Type_Description

Event Details (Detail_ID) Document name (8) Document size (9) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Session ID (45) User Groups (42) Session ID (45) Universe Name (2) User Groups (42) Document Name (8) Number of lines (6) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Session ID (45) SQL value (19) Universe name (2) User Groups (42) Number of lines (6) Object Name (3) Session ID (45) Universe name (2) User Groups (42) Document name (8) Session ID (45) User Groups (42)

11

Document Retrieved

13

Universe Selected

19

Document refreshed Note: This event will also occur when a user creates a docu ment

21

List of Values Retrieved

22

Document Edited

BusinessObjects Enterprise Administrator's Guide

639

14

Auditing Reports Event and Detail reference tables

Event_Type_ ID

Event_Type_Description

Event Details (Detail_ID) Document name (8) Report name (22) Session ID (45) User Groups (42) Document name (8) Document type (21) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Session ID (45) User Groups (42) Document name (8) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Session ID (45) SQL value (19) Universe name (2) User Groups (42) Document name (8) Number of lines (6) Object Folder Path (43) Object instance (90) Object Name (3) Session ID (45) SQL value (19) Universe name (2) User Groups (42)

28

Apply format

40

Get page

41

SQL Generated

42

Drill out of scope

640

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Event_Type_ ID

Event_Type_Description

Event Details (Detail_ID) Document name (8) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Prompt Named Prompt value Session ID (45) User Groups (42)

43

Prompt Selected

50

sendtousers startdesktopapp Object Folder Path (43) Object Name (3) User Groups (42)

51

Note:

Desktop Intelligence only.

Voyager auditing events Event _Type_ID Event_Type_Descrip tion Event Details (Detail_ID) Object Folder Path (43) Object Name (3) User Groups (42) Object Folder Path (43) Object Name (3) User Groups (42) Object Folder Path (43) Object Name (3) User Groups (42)

12500

MDAS Session Creation

12501

MDAS Session Closed

12502

MDAS Cube Connection Opened

BusinessObjects Enterprise Administrator's Guide

641

14

Auditing Reports Event and Detail reference tables

Event _Type_ID

Event_Type_Descrip tion

Event Details (Detail_ID) Object Folder Path (43) Object Name (3) User Groups (42) Object Folder Path (43) Object Name (3) User Groups (42)

12503

MDAS Cube Connection Closed

12504

MDAS Connection Failure

Client events Event_Type_ Event_Type_De ID scription 50 51 sendtousers startdesktopapp Description Triggered by a Desktop Intelligence application sending an object to a user. Triggered by the startup of Desktop Intelligence.

Detail Codes reference table Detail_ID Detail_Description 2 3 6 7 8 9 14 Universe name Object Name Number of lines Number of elements Document name Document size Description Description

642

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Detail_ID Detail_Description 15 16 17 18 19 21 22 23 24 30 31 40 41 42 43 44 45 46 47 48 49 Category name Keywords Options Refreshed Overwrite SQL value Document type Report name Prompt Named Prompt value Data Provider Name Page Range Event ID Event Filename User Groups Object Folder Path Object Category Path Session ID Enterprise Error Text ODBC SQLSTATE ODBC Error Text BOE UserID

Description

BusinessObjects Enterprise Administrator's Guide

643

14

Auditing Reports Event and Detail reference tables

Detail_ID Detail_Description 50 51 Object Type Report Data Type

Description

60

Triggered during thick-client (CORBA) loIP address reported by gon. Records the IP adress reported by client the client. Triggered during thick-client (CORBA) loHostname reported by gon. Records the host machine name reclient ported by the client. Triggered during thin and thick client logon. Records the IP address of the client as reported by the server. This is more IP address resolved by reliable than "IP address reported by server client", but servers may not be able to correctly resolve IP addresses on some networks. Triggered during thin and thick client logon. Records the host machine name of the client as reported by the server. This Hostname resolved by is more reliable than "hostname reported server by client", but servers may not be able to correctly resolve client host names on some networks. Logon using token Destination Type Destination Delivery Type Indicates intended destination of job (printer, folder, email, etc.). Indicates if job was a scheduled operation or user initiated. Records the directory the object or instance is transferred to. Triggered only if a job is communicated using FTP.

61

62

63

64 65

66

67

Directory

644

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Detail_ID Detail_Description

Description Records the file name of the object or instance. Triggered only if a job is communicated using FTP ro email. Records the name of the user who requested the event. Triggered only by user-initiated delivery of an object. Records the name of the host machine of the intended recipient of the object or instance. Triggered by only if a job is published by email or FTP. Records the email domain it is sent to. Triggered by only if a job is published by email. Records the port used in the file transfer. Triggered only if a job is communicated using FTP or email. Triggered only by email delivery of object. Triggered only by email delivery of object. Triggered only by email delivery of object. Records any error messages generated by the failure of a job. Records the name of the intended recipient (if provided by the job).

68

File Name

69

User Name

70

Host Name

71

Domain

72

Port

73 74 75 76

From Address To Address CC Address Error Message

80 81 82 89

Recipient Name Document Scope Publication Instance ID Concurrent User Count

Records a unique instance ID for that event.

BusinessObjects Enterprise Administrator's Guide

645

14

Auditing Reports Event and Detail reference tables

Detail_ID Detail_Description 90 91 92 93 94 95 100 12500 12501 Object instance Parent Document CUID Object CUID Right added Right removed Right modified Number of Copies Printed MDAS General Failure MDAS Credential Failure

Description

Application_Type table reference Applica tion_Type_ID 0 1 2 3 4 5 6 Application_Type_Description PM Rules Service Dashboard Analytics Service Client Auditing Proxy Service Auditing Service Scheduling Host Service Crystal Reports Scheduling Service Crystal Reports Cache Service

646

BusinessObjects Enterprise Administrator's Guide

Auditing Reports Event and Detail reference tables

14

Applica tion_Type_ID 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26

Application_Type_Description Central Management Service Connection Service Crystal Reports Viewing and Modification Service Dashboard Service Desktop Intelligence Scheduling Service Desktop Intelligence Cache Service Desktop Intelligence Processing Service Destination Delivery Scheduling Service Destination Configuration Service PM Visualization Cache Service PM Visualization Processing Service Event Service Sets Profiler Service Input Filestore Service Scheduling Host Service List Of Values Scheduling Service PM Metric Aggregation Service Output Filestore Service Crystal Reports Processing Service Predictive Analytic Service

BusinessObjects Enterprise Administrator's Guide

647

14

Auditing Reports Event and Detail reference tables

Applica tion_Type_ID 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41

Application_Type_Description Program Scheduling Service Publication Scheduling Service Publishing Post Processing Service Publishing Service Replication Service PM Repository Management Service Single Sign-On Service Sets Query Service Process Analysis Service Web Intelligence Scheduling and Publishing Service Web Intelligence Processing Service Desktop Intelligence Search Service Multi-Dimensional Analysis Service Web Intelligence

648

BusinessObjects Enterprise Administrator's Guide

You might also like