Kbase P141223: Auditing enabled and defined but no entries are added to _aud-audit-data for create, update, or dele
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
2/11/2009 |
|
Status: Unverified
SYMPTOM(s):
Auditing enabled and defined but no entries are added to _aud-audit-data for create, update, or delete operations.
Auditing policy is inactive for the Progress default policy named PSC-App-Tables "Database record CUD operations" which is supplied by the $DLC/auditing/policies.xml file.
FACT(s) (Environment):
Auditing is correctly enabled.
All Supported Operating Systems
OpenEdge 10.x
Auditing policy is active for customer defined policy.
CAUSE:
The PSC-App-Tables "Database record CUD operations" must be installed and active for Auditing to appropriately monitor Create, Update or Delete operations (these operations are event IDs 5100, 5101 and 5102 respectively).
FIX:
The following Tools may be used to check if a policy exists in the database:
1) The Windows GUI Data Administration tool (under the Admin>Dump Data and Definitions>Audit Policies>Dump as Text or Dump as XML menus)
2) The Character Data Dictionary tool (under the Admin>Dump Data and Definitions>Audit Policies>Dump as Text or Dump as XML menus)
3) The Audit Policy Maintenance Tool
If the PSC-App-Tables "Database record CUD operations" is visible, make sure the policy is active.
In the Audit Policy Maintenance Tool, the Policy will visibily list Yes or No under the "Active" column.
In the _aud-policies.xml file look for the section describing the named policy and see if there is a line such as this to indicate the policy is active:
<_Audit-policy-active>YES</_Audit-policy-active>
In the _aud-audit-policy.ad file look to see that there is a "yes" as the last field listed for the named policy.
Example:
"2JcMnvNDnJfZES67iSbIyw" "PSC-App-Tables" "Database record CUD operations" 0 0 yes
If the PSC-App-Tables "Database record CUD operations" policy is not installed, install it with the Audit Policy Maintenance Tool, Windows GUI Data Administration Tool or Character Data Dictionary Tool. By default it will be active once loaded.