Professional Documents
Culture Documents
14
14
608
14
Category
What is the average session dura- Average Session Duration? tion What is the average session dura- Average Session Duration per user? tion per User From where are users logging into IP Addresses Accessmy system? ing My Cluster How many jobs were processed per Jobs per User user? User Information When was the last time a specific user used the system? Last Login for User
Who is using the system the most? Most Active Users (by refresh or by login) Number of logged in sessions How many users have used the system? Whose passwords have been modified? Who does not log out correctly? Number of User Sessions Number of Users in the System Password Modifications Users Who Logged Off Incorrectly
609
14
Category
Question
Report
What is the average time for docuAverage Refresh Time ments to refresh? Document Usage Analysis How often have documents been scheduled and viewed? Document Information Detail Document Scheduling and Viewing Status
Document Infomation
What are the 10 least viewed, edit- Least Accessed Docued, and refreshed documents? ments What are the 10 most viewed, edit- Most Accessed Docued, and refreshed documents? ments What are the most popular actions Most Popular Actions per document? per Document How often has an operation been performed on a document? How often have documents been published? Operations on Documents Publishing Auditing
What is the average session dura- Average Session Duration per cluster? tion per Cluster How many Job Services do I have? System InformaHow many jobs are there? tion Job Services on the System Job Summary
How many jobs were processed per Jobs per Job Service Job Service? Type How many audited servers do I have? Services in the Cluster
610
14
Category
Question
Report
What are the most popular actions? Most Popular Actions How many users are accessing my system daily and when is the most Peak Usage popular time? Are my users editing reports or only Refresh and Edit Activirefreshing them? ty Impact Analysis What objects have had their rights Rights Modification changed? How many users are on my system? Total Users Logged In by Day
What is my users activity by month, User Activity week, day? What do the users do? User Activity per Session
Note:
Folder path prompts will not automatically include objects/documents in subfolders below the selected folder. For example, selecting the folder toplevel will show results for all documents in the toplevel folder, but not for any objects/documents in the toplevel/sublevel folder. To see objects/documents in all subfolders, enter toplevel%.
611
14
The average number of sessions and users logging in over a given period of time.
Report sections Average Number of Sessions Users Logged In Average Number of Users Logged In Select a start and end date. Report prompts
The average refresh time per document, user, or cluster over the specified time period.
Report sections Average Refresh Time by Document Average Refresh Time by User Average Refresh Time by Server Enter a folder path and document type, select a start and end date. Report prompts
The average duration of user sessions, broken down by year, quarter, month, week, day, or hour.
Report sections Year Quarter Month Week Enter User name, select a start and end date. Report prompts
612
14
Report prompts
The average duration of sessions for a cluster of servers, by year, month, week, or day.
Report sections Average Session Duration in Minutes per Year Average Session Duration in Minutes per Month Select a start and end date. Average Session Duration in Minutes per Week Average Session Duration in Minutes per Day Report prompts
613
14
Cluster Nodes
The status of document jobs and views over a specified period of time.
Report sections Scheduleing Status Crystal Reports Viewing Status Web Intelligence Viewing Status Desktop Intelligence Viewing Status Enter folder path, select start and end date. Report prompts
614
14
Report sections IP Addresses Accessing My auditing Clusters by IP - Day IP Addresses Accessing My auditing Clusters by IP - Month
Report prompts
Select start and end date. IP Addresses Accessing My auditing Clusters by Name - Day IP Addresses Accessing My auditing Clusters by Name - Month
Number of job services on the system, and the duration of any jobs in seconds (optional).
Report sections Job Services Job Services and Duration of Jobs (sec) None Report prompts
615
14
Job Summary
Number of jobs on the system by status, or number of successfully completed or failed jobs over a given period. Report sections Report prompts
Jobs per Status Successful Jobs Failed Jobs Enter folder path, select start and end date.
A summary of the number of jobs and their durations a user has initiated over a given period of time.
Report sections Jobs per User - Summary Jobs per User Select start and end date. Job Duration per User Job Failures per User Report prompts
Last date and time to the second that a given user logged in to the system.
Report sections Last Login for User Report prompts Enter User name, select start and end date.
616
14
Identifies the least popular documents by times read, edited or refreshed over a given period.
Note:
Documents that are never accessed it will not generate any events and not show up as part of this report.
Report sections Least Accessed Documents - By times Read Least Accessed Documents - By Edits Least Accessed Documents - By Refreshes Select document type and enter folder path, select start and end date. Report prompts
Most used documents based on times read, edited or refreshed over a given period.
Report sections Most Accessed Documents - By times Read Most Accessed Documents - By Edits None Most Accessed Documents - By Refreshes Report prompts
A list of the system's most active users over a given period of time.
617
14
Report prompts
Auantity of the most popular actions for a specified document during a given time period or by specified user.
618
14
Report sections Most Popular Actions per DocumentBy User Most Popular Actions per DocumentBy Session Most Popular Actions per DocumentBy Action Most Popular Actions per DocumentBy Month
Report prompts
Select document name and enter folder path, select start and end date.
Total number of user sessions for a cluster organized per year, month, week, and day.
Report sections by Month by Week by Day Select start and end date. Report prompts
The number of users in the system at the time the report is run.
Report sections Report prompts
619
14
Operation on Documents
The types of operations performed on specified documents, by time, type, user and document, or user.
Note:
Only document types that have generated auditing events will appear in the Document Type prompt dropdown.
Report sections Operation on Documents - By Time Operation on Documents - By OperaEnter user name, Document type and tion Type folder path, select operation and start Operation on Documents - By User and and end date. Document Operation on Documents - By User Report prompts
Password Modifications
Peak Usage
Charts the peaks of user logins, session logins or number of actions performed over a given period of time.
620
14
Report sections Users Login Peaks Session Login Peaks Number of Action Peaks
Report prompts
Publishing auditing
Number of edit and refresh actions per document trace, per cluster, and per selected user over a given period.
Report sections Report prompts
Refresh and Edit Activities of Web In- Select user name, document name and telligence Documents folder path, select start and end date.
Rights Modification
A summary of security activities for a specified folder over a given period of time.
Report sections Rights Modification - By User Rights Modification - By Object Report prompts Select folder path, select start and end date.
621
14
Services in the Cluster Report sections Services in the Cluster Report prompts None.
A summary of the number of users or sessions logged in over a given time period, broken down by day.
Report sections Total Users Logged In by Day -Total Number of Logged In Users Select start and end date. Total Users Logged In by Day - Total Number of Logged in Sessions Report prompts
User Activity
Number of users using the system per month, week, or day within a given time period.
Report sections User Activity by Month User Activity by Week User Activity by Day Select start and end date. Report prompts
Analyses user activity for the whole content of the audit database per cluster, session, action, or date.
622
14
Report sections User Activity per Session Per Cluster User Activity per Session Per Session User Activity per Session Per Action Name User Activity per Session Per Date
Report prompts
Of the users who logged in during a given period, which ones failed to log off correctly.
Report sections Statistics Select start and end date. Users Who Logged Off Incorrectly Report prompts
5. Open the report you want to view. To open a Web Intelligence auditing report, click on the report you want to view.
623
14
To open a Crystal Reports auditing report, open the object package, and then open the report you want to view.
Audit_Event
The Audit_Event table stores one record per action that is audited and contains general information about each auditing event.
624
14
Field
Server_CUID
Description Server and service ID. Combined with the Event_ID to form the primary key for the Audit_Event table. A unique ID generated by the server to identify the auditing event. Combined with Server_CUID to form the primary key for the Audit_Event table. Name of user who performed the action. Time for start of action in UTC (Coordinated Universal Time) to the nearest millisecond. The time stamp is created by the server recording the action in its log file, and includes any correction necessary to synchronize with CMS time. You may want to correct this time to your local time zone when creating auditing reports. Duration, in seconds, of the action that is audited. Number that uniquely identifies the type of action the entry represents. Foreign key for the Event_Type table. Info Object CUID of object associated with the action. This number uniquely identifies an object such as a document, folder or user. Identifies the program that initiates the action, such as Web Intelligence, Desktop Intelligence, Crystal Reports, or Voyager. Field reserved for error codes.
Event_ID
User_Name
Start_Times tamp
Duration Event_Type_ID
Object_CUID
Object_Type
Error_Code
Audit_Detail
The Audit_Detail table records more details about each auditing action recorded in the Audit_Event table. For example, when a user logon fails, the reasons for that failure are recorded as auditing details.
625
14
There may be more than one record in this table for each auditing action recorded in the Audit_Event table.
Field Description Combination of the Server and Service CUID responsible for the event. Combined with the Event_ID and the Detail_ID to form the primary key for the Audit_De tailtable. A unique ID generated by the server to identify the auditing event. Combined with Server_CUID and the De tail_ID to form the primary key for the Audit_Detail table. The Detail_ID field is used to number the individual details associated with each auditing action (i.e. if there are two details associated with a particular auditing action, the first will have a Detail_ID of 1, and the second will have a Detail_ID of 2). Number that uniquely identifies the type of detail about the auditing action that the entry represents. Foreign key for the Detail_Type table. Information about the auditing detail being recorded. For example, if the Detail_Type_Description were "universe name", the detail text would contain the name of that universe.
Server_CUID
Event_ID
Detail_ID
Detail_Type_ID
Detail_Text
Server_Process
The Server_Process table contains information about the servers and services running within your BusinessObjects Enterprise system which can generate auditing events.
626
14
Field
Description Combination of the Server and Service CUID of the server InfoObject that created the event. Primary key for the Server_Process table. Machine name of the server that produced the action. That is, the host name. A unique ID that identifies the type of application that generated the auditing action. Foreign key to the Applica tion_Type table. Name of the server and service that initiated the action. The names are the same as those displayed in the CMC. The default name is host name.servertype. Version of BusinessObjects Enterprise on server that produced the action.
Server_CUID
Server_Name
Application_Type_ID
Server_FullName
Server_Version
Event_Type
The Event_Type table contains a static list of the kinds of events that can be audited in your BusinessObjects Enterprise system. This table provides information roughly equivalent to that provided by AuditIDs and AuditStrings in Crystal Enterprise
Field Description Number that uniquely identifies the type of auditing event that the entry represents.
Event_Type_ID
627
14
Field
Event_Type_Description
Application_Type
The Application_Type table contains a static list of the applications that can produce auditing events.
Field Name Description A unique ID that identifies the type of application that generated the auditing action. The description of the application generating the auditing event.
Application_Type_ID
Application_Type_Description
Detail_Type tables
The Detail_Type table contains a static list of the standard details that can be recorded about audited events. For example, a user logon can fail for a number of different reasons. These reasons are listed as entries in the De tail_Type table. The information in the Detail_Type table is equivalent to the information that was recorded in variable AuditStrings in Crystal Enterprise 10. Field Description
Detail_Type_ID
Number that uniquely identifies the type of auditing detail that the entry represents.
628
14
Field
Description
Detail_Type_Description
The description of the type of auditing detail generated by the auditing event.
Detail Text
65537
User Groups
Admin
65537
45
Session ID
1234
65537
60
IP address report123.456.101.100 ed by client Hostname reporthost.domain.com ed by client IP address resolved by server Hostname resolved by server 123.456.101.100
65537
61
65537
62
65537
63
host.domain.com
629
14
Detail ID 89
Detail Text
65537
juser
The following tables list the Event_Type_ID code for the event, the description, and any details that will be associated with that event followed by their Detail_ID codes in parenthesis.
CMS auditing events Event_Type_ ID Event_Type_Description Event Details (Detail_ID) Concurrent User Count (89) Hostname reported by client (61) Hostname resolved by server (63) IP address reported by client (60) IP Address resolved by server (62) Session ID (45) User Groups (42) Concurrent User Count (89) Hostname reported by client (61) Hostname resolved by server (63) IP address reported by client (60) IP address resolved by server (62) Session ID (45) User Groups (42) Concurrent User Count (89) Session ID (45) User Groups (42) Session ID (45) User Groups (42)
65537
Concurrent user logon suc- ceeded. Named user logon succeed- ed.
65538
65540
65541
630
14
Event_Type_ ID Event_Type_Description
Event Details (Detail_ID) Enterprise Error Text (46 ) Hostname reported by client (61) Hostname resolved by server (63) IP address reported by client (60) IP address resolved by server (62) Logon using token (64) User Groups (42) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Object Type (50) Parent Document CUID (91) Session ID (45) User Groups (42)
65539
65542
Object created.
Note: This auditing string will not be recorded when a new user account is created, even though a new folder is created for each new user. Object Folder Path (43) Object instance (90) Object Name (3) Object Type (50) Session ID (45) User Groups (42)
65543
Object deleted.
631
14
Event_Type_ ID Event_Type_Description
Event Details (Detail_ID) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Object Type (50) Parent Document CUID (91) Session ID (45) User Groups (42)
65544
Object modified.
65545
Unresponsive scheduling. Object Folder Path (43) Object instance (90) Object Name (3) Object Type (50) Parent Document CUID (91) Session ID (45) User Groups (42)
65544
Cache service auditing events Event_Type_ ID Event_Type_Description Event Details (Detail_ID) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Report Data Type (51) User Groups (42) Enterprise Error Text (46) Object Folder Path (43) Object instance (90) Object Name (3) User Groups (42)
196609
196610
632
14
For scheduled objects (by clients or servers), the auditing messages give you information about the status of scheduled actions. For example, the auditing messages can tell you if a scheduled report ran successfully. For the Destination Job service, the auditing messages give you information on whether an object was sent to a destination, as requested by a user.
Event_Type_ ID Event_Type_Description Event Details (Detail_ID) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Universe name (2) User Groups (42) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Universe name (2) User Groups (42) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Template Document (91) Universe Name (2) User Groups (42)
327681
Job successful.
327682
Job failed.
327683
Note: For more information on scheduling jobs, see the BusinessObjects Enterprise Administrator's Guide.
633
14
Event_Type_ ID
Event_Type_Description
Event Details (Detail_ID) Destination Delivery Type (66) Destination Type (65) Document Scope (81) Document size (9) Domain (71) File Name (68) From Address (73) Host Name (70) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Port (72) Publication Instance ID (82) Recipient Name (80) Template Document CUID (91) To Address (74) User Groups (42) User Name (69)
327687
634
14
Event_Type_ ID
Event_Type_Description
Event Details (Detail_ID) Destination Delivery Type (66) Destination Type (65) Document Scope (81) Document size (9) Domain (71) Error Message (76) File Name (68) From Address (73) Host Name (70) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Port (72) Publication Instance ID (82) Recipient Name (80) Template Document CUID (91) To Address (74) User Groups (42) User Name (69)
327688
Event service auditing events Event_Type_ ID 262145 Event_Type_Description Event registered Event Details (Detail_ID) Event filename (41) Event ID (40) Event Filename (41) Event ID (40) Event filename (41) Event ID (40)
262146
Event unregistered
262147
Event updated
635
14
Event_Type_ ID 262148
The Report Application service (RAS) is used to create reports using custom applications developed with the RAS SDK. All of the following codes will be generated by custom applications. Consult your RAS SDK documentation for additional details.
636
14
Event_Type_ ID
Event_Type_Description Report was opened for viewing and/or modification Note: In a few cases, this Event_Type_ID may be generated when the report opens but cannot be viewed. This may occur when: There are problems with the database setup for the report. For example, you may see this message when the database driver for the report is not present on the client machine A processing extension associated with the report aborts viewing, or fails. The report used Business Views and the user did not have permissions to refresh the underlying data connections. The machine running the RAS ran out of space in its temporary directory. Report was saved to the CMS. Report was created and saved to the CMS Report could not be opened. Report could not be saved to the CMS.
458753
Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) User Groups (42)
637
14
Event_Type_ ID 458758
The list of auditable events for Desktop Intelligence and Web Intelligence Rich Client only apply when the client is actively logged in to BusinessObjects Enterprise. If the client is being use in an offline mode then events will not be recorded. If a document is imported to the Web Intelligence Rich Client and worked on as a local document, all auditing events regarding that document will be reported as Web Intelligence client events and contain the details (name, CUID etc.) of the locally saved version of that document, not the repository version. Repository events will be reported by the Web Intelligence Processing Server, and client events will be reported by the Adaptive Processing Server with Client Auditing Proxy Service enabled.
Event_Type_Description Event Details (Detail_ID) Number of elements (7) Session ID (45) User Groups (42) Description (14) Document name (8) Document size (9) Object Folder Path (43) Object instance (90) Object Name (3) Options Refreshed (17) Overwrite (18) Session ID (45) User Groups (42)
Event_Type_ ID
Document Saved
638
14
Event_Type_ ID
Event_Type_Description
Event Details (Detail_ID) Document name (8) Document size (9) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Session ID (45) User Groups (42) Session ID (45) Universe Name (2) User Groups (42) Document Name (8) Number of lines (6) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Session ID (45) SQL value (19) Universe name (2) User Groups (42) Number of lines (6) Object Name (3) Session ID (45) Universe name (2) User Groups (42) Document name (8) Session ID (45) User Groups (42)
11
Document Retrieved
13
Universe Selected
19
Document refreshed Note: This event will also occur when a user creates a docu ment
21
22
Document Edited
639
14
Event_Type_ ID
Event_Type_Description
Event Details (Detail_ID) Document name (8) Report name (22) Session ID (45) User Groups (42) Document name (8) Document type (21) Object CUID (92) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Session ID (45) User Groups (42) Document name (8) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Session ID (45) SQL value (19) Universe name (2) User Groups (42) Document name (8) Number of lines (6) Object Folder Path (43) Object instance (90) Object Name (3) Session ID (45) SQL value (19) Universe name (2) User Groups (42)
28
Apply format
40
Get page
41
SQL Generated
42
640
14
Event_Type_ ID
Event_Type_Description
Event Details (Detail_ID) Document name (8) Object Folder Path (43) Object instance (90) Object Name (3) Parent Document CUID (91) Prompt Named Prompt value Session ID (45) User Groups (42)
43
Prompt Selected
50
sendtousers startdesktopapp Object Folder Path (43) Object Name (3) User Groups (42)
51
Note:
Voyager auditing events Event _Type_ID Event_Type_Descrip tion Event Details (Detail_ID) Object Folder Path (43) Object Name (3) User Groups (42) Object Folder Path (43) Object Name (3) User Groups (42) Object Folder Path (43) Object Name (3) User Groups (42)
12500
12501
12502
641
14
Event _Type_ID
Event_Type_Descrip tion
Event Details (Detail_ID) Object Folder Path (43) Object Name (3) User Groups (42) Object Folder Path (43) Object Name (3) User Groups (42)
12503
12504
Client events Event_Type_ Event_Type_De ID scription 50 51 sendtousers startdesktopapp Description Triggered by a Desktop Intelligence application sending an object to a user. Triggered by the startup of Desktop Intelligence.
Detail Codes reference table Detail_ID Detail_Description 2 3 6 7 8 9 14 Universe name Object Name Number of lines Number of elements Document name Document size Description Description
642
14
Detail_ID Detail_Description 15 16 17 18 19 21 22 23 24 30 31 40 41 42 43 44 45 46 47 48 49 Category name Keywords Options Refreshed Overwrite SQL value Document type Report name Prompt Named Prompt value Data Provider Name Page Range Event ID Event Filename User Groups Object Folder Path Object Category Path Session ID Enterprise Error Text ODBC SQLSTATE ODBC Error Text BOE UserID
Description
643
14
Description
60
Triggered during thick-client (CORBA) loIP address reported by gon. Records the IP adress reported by client the client. Triggered during thick-client (CORBA) loHostname reported by gon. Records the host machine name reclient ported by the client. Triggered during thin and thick client logon. Records the IP address of the client as reported by the server. This is more IP address resolved by reliable than "IP address reported by server client", but servers may not be able to correctly resolve IP addresses on some networks. Triggered during thin and thick client logon. Records the host machine name of the client as reported by the server. This Hostname resolved by is more reliable than "hostname reported server by client", but servers may not be able to correctly resolve client host names on some networks. Logon using token Destination Type Destination Delivery Type Indicates intended destination of job (printer, folder, email, etc.). Indicates if job was a scheduled operation or user initiated. Records the directory the object or instance is transferred to. Triggered only if a job is communicated using FTP.
61
62
63
64 65
66
67
Directory
644
14
Detail_ID Detail_Description
Description Records the file name of the object or instance. Triggered only if a job is communicated using FTP ro email. Records the name of the user who requested the event. Triggered only by user-initiated delivery of an object. Records the name of the host machine of the intended recipient of the object or instance. Triggered by only if a job is published by email or FTP. Records the email domain it is sent to. Triggered by only if a job is published by email. Records the port used in the file transfer. Triggered only if a job is communicated using FTP or email. Triggered only by email delivery of object. Triggered only by email delivery of object. Triggered only by email delivery of object. Records any error messages generated by the failure of a job. Records the name of the intended recipient (if provided by the job).
68
File Name
69
User Name
70
Host Name
71
Domain
72
Port
73 74 75 76
80 81 82 89
645
14
Detail_ID Detail_Description 90 91 92 93 94 95 100 12500 12501 Object instance Parent Document CUID Object CUID Right added Right removed Right modified Number of Copies Printed MDAS General Failure MDAS Credential Failure
Description
Application_Type table reference Applica tion_Type_ID 0 1 2 3 4 5 6 Application_Type_Description PM Rules Service Dashboard Analytics Service Client Auditing Proxy Service Auditing Service Scheduling Host Service Crystal Reports Scheduling Service Crystal Reports Cache Service
646
14
Applica tion_Type_ID 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26
Application_Type_Description Central Management Service Connection Service Crystal Reports Viewing and Modification Service Dashboard Service Desktop Intelligence Scheduling Service Desktop Intelligence Cache Service Desktop Intelligence Processing Service Destination Delivery Scheduling Service Destination Configuration Service PM Visualization Cache Service PM Visualization Processing Service Event Service Sets Profiler Service Input Filestore Service Scheduling Host Service List Of Values Scheduling Service PM Metric Aggregation Service Output Filestore Service Crystal Reports Processing Service Predictive Analytic Service
647
14
Applica tion_Type_ID 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41
Application_Type_Description Program Scheduling Service Publication Scheduling Service Publishing Post Processing Service Publishing Service Replication Service PM Repository Management Service Single Sign-On Service Sets Query Service Process Analysis Service Web Intelligence Scheduling and Publishing Service Web Intelligence Processing Service Desktop Intelligence Search Service Multi-Dimensional Analysis Service Web Intelligence
648