BO Enterprise - Administrator's Guide (Auditing Reports).pdf

42
Auditing Reports 14

Transcript of BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Page 1: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Auditing Reports

14

Page 2: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Using auditing reports

If you are an administrator who wants to view reports from the auditing

database, you have these choices:

• You can use the auditing reports that are included with BusinessObjects

Enterprise.

• You canmodify the auditing reports that are included with BusinessObjects

Enterprise.

• You can create your own auditing reports.

Why are reports important?

Auditor includes reports that can answer questions youmay have about your

BusinessObjects Enterprise deployment. Each report contains one or more

report sections that focus on a very specific area.

608 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Using auditing reports

Page 3: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Table 14-1: Questons Auditing can answer

ReportQuestionCategory

Average Number of

Users Logged In

How many users are on my sys-

tem?

User Information

Average Session Dura-

tion

What is the average session dura-

tion?

Average Session Dura-

tion per User

What is the average session dura-

tion per user?

IP Addresses Access-

ing My Cluster

From where are users logging into

my system?

Jobs per UserHowmany jobs were processed per

user?

Last Login for UserWhen was the last time a specific

user used the system?

Most Active UsersWho is using the system the most?

(by refresh or by login)

Number of User Ses-

sionsNumber of logged in sessions

Number of Users in the

System

How many users have used the

system?

PasswordModificationsWhose passwords have been

modified?

Users Who Logged Off

IncorrectlyWho does not log out correctly?

BusinessObjects Enterprise Administrator's Guide 609

14Auditing Reports

Using auditing reports

Page 4: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

ReportQuestionCategory

Average Refresh TimeWhat is the average time for docu-

ments to refresh?

Document Info-

mation

Document Information

DetailDocument Usage Analysis

Document Scheduling

and Viewing Status

How often have documents been

scheduled and viewed?

Least Accessed Docu-

ments

What are the 10 least viewed, edit-

ed, and refreshed documents?

Most Accessed Docu-

ments

What are the 10 most viewed, edit-

ed, and refreshed documents?

Most Popular Actions

per Document

What are the most popular actions

per document?

Operations on Docu-

ments

How often has an operation been

performed on a document?

Publishing AuditingHow often have documents been

published?

Average Session Dura-

tion per Cluster

What is the average session dura-

tion per cluster?

System Informa-

tion

Job Services on the

SystemHowmany Job Services do I have?

Job SummaryHow many jobs are there?

Jobs per Job Service

Type

Howmany jobs were processed per

Job Service?

Services in the ClusterHow many audited servers do I

have?

610 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Using auditing reports

Page 5: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

ReportQuestionCategory

Most Popular ActionsWhat are the most popular actions?

Impact Analysis

Peak Usage

How many users are accessing my

system daily and when is the most

popular time?

Refresh and Edit Activi-

ty

Are my users editing reports or only

refreshing them?

Rights ModificationWhat objects have had their rights

changed?

Total Users Logged In

by Day

How many users are on my sys-

tem?

User ActivityWhat is my users activity by month,

week, day?

User Activity per Ses-

sionWhat do the users do?

Auditing report names

This section contains the following:

• the list of the report names

• the report sections included with the reports

• the report prompts

Note:

Folder path prompts will not automatically include objects/documents in

subfolders below the selected folder. For example, selecting the folder

toplevel will show results for all documents in the toplevel folder, but not

for any objects/documents in the toplevel/sublevel folder. To see

objects/documents in all subfolders, enter toplevel%.

BusinessObjects Enterprise Administrator's Guide 611

14Auditing Reports

Using auditing reports

Page 6: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Average Number of Users Logged In

The average number of sessions and users logging in over a given period

of time.

Report promptsReport sections

Select a start and end date.

Average Number of Sessions

Users Logged In

Average Number of Users Logged In

Average Refresh Time

The average refresh time per document, user, or cluster over the specified

time period.

Report promptsReport sections

Enter a folder path and document type,

select a start and end date.

Average Refresh Time by Document

Average Refresh Time by User

Average Refresh Time by Server

Average Session Duration

The average duration of user sessions, broken down by year, quarter, month,

week, day, or hour.

Report promptsReport sections

Enter User name, select a start and

end date.

Year

Quarter

Month

Week

612 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Using auditing reports

Page 7: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Report promptsReport sections

Day

Hour

Average Session Duration per Cluster

The average duration of sessions for a cluster of servers, by year, month,

week, or day.

Report promptsReport sections

Select a start and end date.

Average Session Duration in Minutes

per Year

Average Session Duration in Minutes

per Month

Average Session Duration in Minutes

per Week

Average Session Duration in Minutes

per Day

Average Session Duration per User

The average duration of specific users' sessions, by year, month or week.

Report promptsReport sections

Select a start and end date.

Average Session Duration in Minutes

over the Year

Average Session Duration in Minutes

per Month per User

Average Session Duration in Minutes

per Week per User

BusinessObjects Enterprise Administrator's Guide 613

14Auditing Reports

Using auditing reports

Page 8: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Cluster Nodes

The names of all servers in the audit cluster.

Report promptsReport sections

NoneServers in the Cluster

Document Information Detail

Provides details of actions performed on a given document.

Report promptsReport sections

Enter document name and folder path,

select a start and end date.Document Information

Document Scheduling and Viewing Status

The status of document jobs and views over a specified period of time.

Report promptsReport sections

Enter folder path, select start and end

date.

Scheduleing Status

Crystal Reports Viewing Status

Web Intelligence Viewing Status

Desktop Intelligence Viewing Status

IP Addresses Accessing My auditing Clusters

The IP addresses or machine names of clients accessing the audit cluster.

614 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Using auditing reports

Page 9: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Report promptsReport sections

Select start and end date.

IP Addresses Accessing My auditing

Clusters by IP - Day

IP Addresses Accessing My auditing

Clusters by IP - Month

IP Addresses Accessing My auditing

Clusters by Name - Day

IP Addresses Accessing My auditing

Clusters by Name - Month

Jobs per Job Service

Number of jobs per server type, kind, or specific server.

Report promptsReport sections

None

Jobs per Job Server Kind- Summary

Jobs per Job Server Kind

Jobs per Job Service

Job Services on System

Number of job services on the system, and the duration of any jobs in seconds

(optional).

Report promptsReport sections

None

Job Services

Job Services and Duration of Jobs

(sec)

BusinessObjects Enterprise Administrator's Guide 615

14Auditing Reports

Using auditing reports

Page 10: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Job Summary

Number of jobs on the system by status, or number of successfully completed

or failed jobs over a given period.

Report promptsReport sections

Enter folder path, select start and end

date.

Jobs per Status

Successful Jobs

Failed Jobs

Jobs per User

A summary of the number of jobs and their durations a user has initiated

over a given period of time.

Report promptsReport sections

Select start and end date.

Jobs per User - Summary

Jobs per User

Job Duration per User

Job Failures per User

Last Login for User

Last date and time to the second that a given user logged in to the system.

Report promptsReport sections

Enter User name, select start and end

date.Last Login for User

616 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Using auditing reports

Page 11: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Least Accessed Documents

Identifies the least popular documents by times read, edited or refreshed

over a given period.

Note:

Documents that are never accessed it will not generate any events and not

show up as part of this report.

Report promptsReport sections

Select document type and enter folder

path, select start and end date.

Least Accessed Documents - By times

Read

Least Accessed Documents - By Edits

Least Accessed Documents - By Re-

freshes

Most Accessed Documents

Most used documents based on times read, edited or refreshed over a given

period.

Report promptsReport sections

None

Most Accessed Documents - By times

Read

Most Accessed Documents - By Edits

Most Accessed Documents - By Re-

freshes

Most Active Users

A list of the system's most active users over a given period of time.

BusinessObjects Enterprise Administrator's Guide 617

14Auditing Reports

Using auditing reports

Page 12: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Report promptsReport sections

Select start and end date.

Most Active Users by Logins

Most Active Users by Refreshes

Most Popular Actions

Quantity of the most popular actions during a given time period

Report PromptsReport Sections

Select start and end date.

Most Popular Actions per Year

Most Popular Actions per Quarter

Most Popular Actions per Month

Most Popular Actions per Week

Most Popular Actions per Day

Most Popular Actions per Document

Auantity of the most popular actions for a specified document during a given

time period or by specified user.

618 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Using auditing reports

Page 13: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Report promptsReport sections

Select document name and enter folder

path, select start and end date.

Most Popular Actions per Document-

By User

Most Popular Actions per Document-

By Session

Most Popular Actions per Document-

By Action

Most Popular Actions per Document-

By Month

Number of User Sessions

Total number of user sessions for a cluster organized per year, month, week,

and day.

Report promptsReport sections

Select start and end date.

by Month

by Week

by Day

Number of Users in the System

The number of users in the system at the time the report is run.

Report promptsReport sections

NoneNumber of Users in the System - Active

Users

BusinessObjects Enterprise Administrator's Guide 619

14Auditing Reports

Using auditing reports

Page 14: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Operation on Documents

The types of operations performed on specified documents, by time, type,

user and document, or user.

Note:

Only document types that have generated auditing events will appear in the

Document Type prompt dropdown.

Report promptsReport sections

Enter user name, Document type and

folder path, select operation and start

and end date.

Operation on Documents - By Time

Operation on Documents - By Opera-

tion Type

Operation on Documents - By User and

Document

Operation on Documents - By User

Password Modifications

A summary of password modification operations over a specified period of

time.

Report promptsReport sections

Select start and end date.

Password Modifications - By Month

Password Modifications - By Week

Password Modifications - By Details

Peak Usage

Charts the peaks of user logins, session logins or number of actions

performed over a given period of time.

620 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Using auditing reports

Page 15: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Report promptsReport sections

Select start and end date.

Users Login Peaks

Session Login Peaks

Number of Action Peaks

Publishing auditing

Publication activity for a specific document over a given period of time.

Report promptsReport sections

Enter publication name, select start and

end date.Publishing Auditing

Refresh and Edit Activity

Number of edit and refresh actions per document trace, per cluster, and per

selected user over a given period.

Report promptsReport sections

Select user name, document name and

folder path, select start and end date.

Refresh and Edit Activities of Web In-

telligence Documents

Rights Modification

A summary of security activities for a specified folder over a given period of

time.

Report promptsReport sections

Select folder path, select start and end

date.

Rights Modification - By User

Rights Modification - By Object

BusinessObjects Enterprise Administrator's Guide 621

14Auditing Reports

Using auditing reports

Page 16: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Services in the Cluster

Report promptsReport sections

None.Services in the Cluster

Total Users Logged In by Day

A summary of the number of users or sessions logged in over a given time

period, broken down by day.

Report promptsReport sections

Select start and end date.

Total Users Logged In by Day -Total

Number of Logged In Users

Total Users Logged In by Day - Total

Number of Logged in Sessions

User Activity

Number of users using the system per month, week, or day within a given

time period.

Report promptsReport sections

Select start and end date.

User Activity by Month

User Activity by Week

User Activity by Day

User Activity per Session

Analyses user activity for the whole content of the audit database per cluster,

session, action, or date.

622 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Using auditing reports

Page 17: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Report promptsReport sections

Enter user name, select start and end

date.

User Activity per Session Per Cluster

User Activity per Session Per Session

User Activity per Session Per Action

Name

User Activity per Session Per Date

Users Who Logged Off Incorrectly

Of the users who logged in during a given period, which ones failed to log

off correctly.

Report promptsReport sections

Select start and end date.

Statistics

Users Who Logged Off Incorrectly

Viewing sample auditing reports

To view sample auditing reports

1. Log on to InfoView.

2. Click Public Folders.

3. Click Auditing Reports.

4. Click the language folder of your choice.

A list of sample auditing reports is displayed.

5. Open the report you want to view.

• To open a Web Intelligence auditing report, click on the report you

want to view.

BusinessObjects Enterprise Administrator's Guide 623

14Auditing Reports

Viewing sample auditing reports

Page 18: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

• To open a Crystal Reports auditing report, open the object package,

and then open the report you want to view.

Creating custom auditing reports

This section contains information to help you understand the auditing

database, the Activity universe and the information it records about auditing

actions. With this information, you can use Crystal Reports, Web Intelligence

or Desktop Intelligence to create custom auditing reports of user and system

actions.

Auditing database schema reference

The auditing database contains six tables:

• Audit_Event on page 624

• Audit_Detail on page 625

• Server_Process on page 626

• Detail_Type tables on page 628

• Event_Type on page 627

• Application_Type on page 628

The following diagram shows the schema of the auditing database.

Audit_Event

The Audit_Event table stores one record per action that is audited and

contains general information about each auditing event.

624 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Creating custom auditing reports

Page 19: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

DescriptionField

Server and service ID. Combined with the Event_ID to form

the primary key for the Audit_Event table.Server_CUID

A unique ID generated by the server to identify the auditing

event. Combined with Server_CUID to form the primary

key for the Audit_Event table.

Event_ID

Name of user who performed the action.User_Name

Time for start of action in UTC (Coordinated Universal Time)

to the nearest millisecond. The time stamp is created by the

server recording the action in its log file, and includes any

correction necessary to synchronize with CMS time. You

may want to correct this time to your local time zone when

creating auditing reports.

Start_Times

tamp

Duration, in seconds, of the action that is audited.Duration

Number that uniquely identifies the type of action the entry

represents. Foreign key for the Event_Type table.Event_Type_ID

Info Object CUID of object associated with the action. This

number uniquely identifies an object such as a document,

folder or user.

Object_CUID

Identifies the program that initiates the action, such as Web

Intelligence, Desktop Intelligence, Crystal Reports, or Voy-

ager.

Object_Type

Field reserved for error codes.Error_Code

Audit_Detail

The Audit_Detail table records more details about each auditing action

recorded in the Audit_Event table. For example, when a user logon fails,

the reasons for that failure are recorded as auditing details.

BusinessObjects Enterprise Administrator's Guide 625

14Auditing Reports

Auditing database schema reference

Page 20: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

There may be more than one record in this table for each auditing action

recorded in the Audit_Event table.

DescriptionField

Combination of the Server and Service CUID responsible

for the event. Combined with the Event_ID and the

Detail_ID to form the primary key for the Audit_De

tailtable.

Server_CUID

A unique ID generated by the server to identify the audit-

ing event. Combined with Server_CUID and the De

tail_ID to form the primary key for the Audit_Detail

table.

Event_ID

The Detail_ID field is used to number the individual

details associated with each auditing action (i.e. if there

are two details associated with a particular auditing ac-

tion, the first will have a Detail_ID of 1, and the second

will have a Detail_ID of 2).

Detail_ID

Number that uniquely identifies the type of detail about

the auditing action that the entry represents. Foreign key

for the Detail_Type table.

Detail_Type_ID

Information about the auditing detail being recorded. For

example, if the Detail_Type_Description were

"universe name", the detail text would contain the name

of that universe.

Detail_Text

Server_Process

The Server_Process table contains information about the servers and

services running within your BusinessObjects Enterprise system which can

generate auditing events.

626 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Auditing database schema reference

Page 21: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

DescriptionField

Combination of the Server and Service

CUID of the server InfoObject that cre-

ated the event. Primary key for the

Server_Process table.

Server_CUID

Machine name of the server that pro-

duced the action. That is, the host

name.

Server_Name

A unique ID that identifies the type of

application that generated the auditing

action. Foreign key to the Applica

tion_Type table.

Application_Type_ID

Name of the server and service that

initiated the action. The names are the

same as those displayed in the CMC.

The default name is host

name.servertype.

Server_FullName

Version of BusinessObjects Enterprise

on server that produced the action.Server_Version

Event_Type

The Event_Type table contains a static list of the kinds of events that can

be audited in your BusinessObjects Enterprise system. This table provides

information roughly equivalent to that provided by AuditIDs and AuditStrings

in Crystal Enterprise

DescriptionField

Number that uniquely identifies the type

of auditing event that the entry repre-

sents.

Event_Type_ID

BusinessObjects Enterprise Administrator's Guide 627

14Auditing Reports

Auditing database schema reference

Page 22: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

DescriptionField

Description of the type of auditing

event.Event_Type_Description

Application_Type

The Application_Type table contains a static list of the applications that

can produce auditing events.

DescriptionField Name

A unique ID that identifies the type of

application that generated the auditing

action.

Application_Type_ID

The description of the application gen-

erating the auditing event.Application_Type_Description

Detail_Type tables

The Detail_Type table contains a static list of the standard details that can

be recorded about audited events. For example, a user logon can fail for a

number of different reasons. These reasons are listed as entries in the De

tail_Type table.

The information in the Detail_Type table is equivalent to the information

that was recorded in variable AuditStrings in Crystal Enterprise 10.

DescriptionField

Number that uniquely identifies the type of

auditing detail that the entry represents.Detail_Type_ID

628 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Auditing database schema reference

Page 23: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

DescriptionField

The description of the type of auditing detail

generated by the auditing event.Detail_Type_Description

Event and Detail reference tables

The following tables list the Event_Type_ID and Event_Type_Description

of all events that can be audited in your system. For your convenience, these

events are ordered according to the service that generates each type of

event.

The following table shows and example event.

Detail TextDetail Descrip-

tion

De-

tail

ID

Event DescriptionEvent

ID

AdminUser Groups42Concurrent user lo-

gon succeeded.65537

1234Session ID45Concurrent user lo-

gon succeeded.65537

123.456.101.100IP address report-

ed by client60

Concurrent user lo-

gon succeeded.65537

host.domain.comHostname report-

ed by client61

Concurrent user lo-

gon succeeded.65537

123.456.101.100IP address re-

solved by server62

Concurrent user lo-

gon succeeded.65537

host.domain.comHostname re-

solved by server63

Concurrent user lo-

gon succeeded.65537

BusinessObjects Enterprise Administrator's Guide 629

14Auditing Reports

Event and Detail reference tables

Page 24: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Detail TextDetail Descrip-

tion

De-

tail

ID

Event DescriptionEvent

ID

juserConcurrent user

account89

Concurrent user lo-

gon succeeded.65537

The following tables list the Event_Type_ID code for the event, the

description, and any details that will be associated with that event followed

by their Detail_ID codes in parenthesis.

CMS auditing events

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Concurrent User Count (89)

• Hostname reported by client (61)

• Hostname resolved by server (63)

• IP address reported by client (60)

• IP Address resolved by server (62)

• Session ID (45)

• User Groups (42)

Concurrent user logon suc-

ceeded.65537

• Concurrent User Count (89)

• Hostname reported by client (61)

• Hostname resolved by server (63)

• IP address reported by client (60)

• IP address resolved by server (62)

• Session ID (45)

• User Groups (42)

Named user logon succeed-

ed.65538

• Concurrent User Count (89)

• Session ID (45)

• User Groups (42)

User logged off.65540

• Session ID (45)

• User Groups (42)User password has been

changed.65541

630 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 25: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Enterprise Error Text (46 )

• Hostname reported by client (61)

• Hostname resolved by server (63)

• IP address reported by client (60)

• IP address resolved by server (62)

• Logon using token (64)

• User Groups (42)

User logon failed.65539

• Object CUID (92)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Object Type (50)

• Parent Document CUID (91)

• Session ID (45)

• User Groups (42)

Note:

This auditing string will not be recorded when

a new user account is created, even though

a new folder is created for each new user.

Object created.65542

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Object Type (50)

• Session ID (45)

• User Groups (42)

Object deleted.65543

BusinessObjects Enterprise Administrator's Guide 631

14Auditing Reports

Event and Detail reference tables

Page 26: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Object CUID (92)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Object Type (50)

• Parent Document CUID (91)

• Session ID (45)

• User Groups (42)

Object modified.65544

Unresponsive scheduling.65545

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Object Type (50)

• Parent Document CUID (91)

• Session ID (45)

• User Groups (42)

Object Rights Modified65544

Cache service auditing events

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• Report Data Type (51)

• User Groups (42)

Report Viewing Succeeded.196609

• Enterprise Error Text (46)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• User Groups (42)

Report Viewing Failed.196610

632 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 27: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Job service auditing events

For scheduled objects (by clients or servers), the auditing messages give

you information about the status of scheduled actions. For example, the

auditing messages can tell you if a scheduled report ran successfully.

For the Destination Job service, the auditing messages give you information

on whether an object was sent to a destination, as requested by a user.

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• Universe name (2)

• User Groups (42)

Job successful.327681

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• Universe name (2)

• User Groups (42)

Job failed.327682

• Object CUID (92)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Template Document (91)

• Universe Name (2)

• User Groups (42)

Note:

For more information on scheduling jobs,

see the BusinessObjects Enterprise Ad-

ministrator's Guide.

Job failed. Job will be retried

by the CMS.327683

BusinessObjects Enterprise Administrator's Guide 633

14Auditing Reports

Event and Detail reference tables

Page 28: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Destination Delivery Type (66)

• Destination Type (65)

• Document Scope (81)

• Document size (9)

• Domain (71)

• File Name (68)

• From Address (73)

• Host Name (70)

• Object CUID (92)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Port (72)

• Publication Instance ID (82)

• Recipient Name (80)

• Template Document CUID (91)

• To Address (74)

• User Groups (42)

• User Name (69)

Destination Delivery Succeed-

ed327687

634 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 29: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Destination Delivery Type (66)

• Destination Type (65)

• Document Scope (81)

• Document size (9)

• Domain (71)

• Error Message (76)

• File Name (68)

• From Address (73)

• Host Name (70)

• Object CUID (92)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Port (72)

• Publication Instance ID (82)

• Recipient Name (80)

• Template Document CUID (91)

• To Address (74)

• User Groups (42)

• User Name (69)

Destination Delivery Failed327688

Event service auditing events

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Event filename (41)

• Event ID (40)Event registered262145

• Event Filename (41)

• Event ID (40)Event unregistered262146

• Event filename (41)

• Event ID (40)Event updated262147

BusinessObjects Enterprise Administrator's Guide 635

14Auditing Reports

Event and Detail reference tables

Page 30: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Event filename (41)

• Event ID (40)Event triggered262148

Report Application service auditing events

The Report Application service (RAS) is used to create reports using custom

applications developed with the RAS SDK. All of the following codes will be

generated by custom applications. Consult your RAS SDK documentation

for additional details.

636 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 31: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Object CUID (92)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• User Groups (42)

Report was opened for viewing

and/or modification

Note:

In a few cases, this

Event_Type_IDmay be generat-

ed when the report opens but

cannot be viewed. This may oc-

cur when:

• There are problems with the

database setup for the report.

For example, you may see

this message when the

database driver for the report

is not present on the client

machine

• A processing extension asso-

ciated with the report aborts

viewing, or fails.

• The report used Business

Views and the user did not

have permissions to refresh

the underlying data connec-

tions.

• Themachine running the RAS

ran out of space in its tempo-

rary directory.

458753

Report was saved to the CMS.458754

Report was created and saved to

the CMS458755

Report could not be opened.458756

Report could not be saved to the

CMS.458757

BusinessObjects Enterprise Administrator's Guide 637

14Auditing Reports

Event and Detail reference tables

Page 32: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

Report could not be created in

the CMS.458758

Web Intelligence and Desktop Intelligence auditing events

Note:

• The list of auditable events for Desktop Intelligence andWeb Intelligence

Rich Client only apply when the client is actively logged in to

BusinessObjects Enterprise. If the client is being use in an offline mode

then events will not be recorded.

• If a document is imported to the Web Intelligence Rich Client and worked

on as a local document, all auditing events regarding that document will

be reported as Web Intelligence client events and contain the details

(name, CUID etc.) of the locally saved version of that document, not the

repository version. Repository events will be reported by the Web

Intelligence Processing Server, and client events will be reported by the

Adaptive Processing Server with Client Auditing Proxy Service enabled.

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Number of elements (7)

• Session ID (45)

• User Groups (42)

List of Universes Retrieved6

• Description (14)

• Document name (8)

• Document size (9)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Options Refreshed (17)

• Overwrite (18)

• Session ID (45)

• User Groups (42)

Document Saved9

638 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 33: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Document name (8)

• Document size (9)

• Object CUID (92)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• Session ID (45)

• User Groups (42)

Document Retrieved11

• Session ID (45)

• Universe Name (2)

• User Groups (42)

Universe Selected13

• Document Name (8)

• Number of lines (6)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• Session ID (45)

• SQL value (19)

• Universe name (2)

• User Groups (42)

Document refreshed

Note:

This event will also occur

when a user creates a docu-

ment

19

• Number of lines (6)

• Object Name (3)

• Session ID (45)

• Universe name (2)

• User Groups (42)

List of Values Retrieved21

• Document name (8)

• Session ID (45)

• User Groups (42)

Document Edited22

BusinessObjects Enterprise Administrator's Guide 639

14Auditing Reports

Event and Detail reference tables

Page 34: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Document name (8)

• Report name (22)

• Session ID (45)

• User Groups (42)

Apply format28

• Document name (8)

• Document type (21)

• Object CUID (92)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• Session ID (45)

• User Groups (42)

Get page40

• Document name (8)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• Session ID (45)

• SQL value (19)

• Universe name (2)

• User Groups (42)

SQL Generated41

• Document name (8)

• Number of lines (6)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Session ID (45)

• SQL value (19)

• Universe name (2)

• User Groups (42)

Drill out of scope42

640 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 35: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID

• Document name (8)

• Object Folder Path (43)

• Object instance (90)

• Object Name (3)

• Parent Document CUID (91)

• Prompt Named

• Prompt value

• Session ID (45)

• User Groups (42)

Prompt Selected43

sendtousers50

• Object Folder Path (43)

• Object Name (3)

• User Groups (42)

startdesktopapp

Note:

Desktop Intelligence only.51

Voyager auditing events

Event Details (Detail_ID)Event_Type_Descrip

tionEvent _Type_ID

• Object Folder Path (43)

• Object Name (3)

• User Groups (42)

MDAS Session Creation12500

• Object Folder Path (43)

• Object Name (3)

• User Groups (42)

MDAS Session Closed12501

• Object Folder Path (43)

• Object Name (3)

• User Groups (42)

MDAS Cube Connection

Opened12502

BusinessObjects Enterprise Administrator's Guide 641

14Auditing Reports

Event and Detail reference tables

Page 36: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Event Details (Detail_ID)Event_Type_Descrip

tionEvent _Type_ID

• Object Folder Path (43)

• Object Name (3)

• User Groups (42)

MDAS Cube Connection

Closed12503

• Object Folder Path (43)

• Object Name (3)

• User Groups (42)

MDAS Connection Fail-

ure12504

Client events

DescriptionEvent_Type_De

scription

Event_Type_

ID

Triggered by a Desktop Intelligence application sending

an object to a user.sendtousers50

Triggered by the startup of Desktop Intelligence.startdesktopapp51

Detail Codes reference table

DescriptionDetail_DescriptionDetail_ID

Universe name2

Object Name3

Number of lines6

Number of elements7

Document name8

Document size9

Description14

642 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 37: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

DescriptionDetail_DescriptionDetail_ID

Category name15

Keywords16

Options Refreshed17

Overwrite18

SQL value19

Document type21

Report name22

Prompt Named23

Prompt value24

Data Provider Name30

Page Range31

Event ID40

Event Filename41

User Groups42

Object Folder Path43

Object Category Path44

Session ID45

Enterprise Error Text46

ODBC SQLSTATE47

ODBC Error Text48

BOE UserID49

BusinessObjects Enterprise Administrator's Guide 643

14Auditing Reports

Event and Detail reference tables

Page 38: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

DescriptionDetail_DescriptionDetail_ID

Object Type50

Report Data Type51

Triggered during thick-client (CORBA) lo-

gon. Records the IP adress reported by

the client.

IP address reported by

client60

Triggered during thick-client (CORBA) lo-

gon. Records the host machine name re-

ported by the client.

Hostname reported by

client61

Triggered during thin and thick client lo-

gon. Records the IP address of the client

as reported by the server. This is more

reliable than "IP address reported by

client", but servers may not be able to

correctly resolve IP addresses on some

networks.

IP address resolved by

server62

Triggered during thin and thick client lo-

gon. Records the host machine name of

the client as reported by the server. This

is more reliable than "hostname reported

by client", but servers may not be able to

correctly resolve client host names on

some networks.

Hostname resolved by

server63

Logon using token64

Indicates intended destination of job

(printer, folder, email, etc.).Destination Type65

Indicates if job was a scheduled operation

or user initiated.

Destination Delivery

Type66

Records the directory the object or in-

stance is transferred to. Triggered only if

a job is communicated using FTP.

Directory67

644 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 39: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

DescriptionDetail_DescriptionDetail_ID

Records the file name of the object or in-

stance. Triggered only if a job is communi-

cated using FTP ro email.

File Name68

Records the name of the user who request-

ed the event. Triggered only by user-initi-

ated delivery of an object.

User Name69

Records the name of the host machine of

the intended recipient of the object or in-

stance. Triggered by only if a job is pub-

lished by email or FTP.

Host Name70

Records the email domain it is sent to.

Triggered by only if a job is published by

email.

Domain71

Records the port used in the file transfer.

Triggered only if a job is communicated

using FTP or email.

Port72

Triggered only by email delivery of object.From Address73

Triggered only by email delivery of object.To Address74

Triggered only by email delivery of object.CC Address75

Records any error messages generated

by the failure of a job.Error Message76

Records the name of the intended recipi-

ent (if provided by the job).Recipient Name80

Document Scope81

Records a unique instance ID for that

event.Publication Instance ID82

Concurrent User Count89

BusinessObjects Enterprise Administrator's Guide 645

14Auditing Reports

Event and Detail reference tables

Page 40: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

DescriptionDetail_DescriptionDetail_ID

Object instance90

Parent Document CUID91

Object CUID92

Right added93

Right removed94

Right modified95

Number of Copies

Printed100

MDAS General Failure12500

MDAS Credential Fail-

ure12501

Application_Type table reference

Application_Type_DescriptionApplica

tion_Type_ID

PM Rules Service0

Dashboard Analytics Service1

Client Auditing Proxy Service2

Auditing Service3

Scheduling Host Service4

Crystal Reports Scheduling Service5

Crystal Reports Cache Service6

646 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables

Page 41: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Application_Type_DescriptionApplica

tion_Type_ID

Central Management Service7

Connection Service8

Crystal Reports Viewing and Modification Service9

Dashboard Service10

Desktop Intelligence Scheduling Service11

Desktop Intelligence Cache Service12

Desktop Intelligence Processing Service13

Destination Delivery Scheduling Service14

Destination Configuration Service15

PM Visualization Cache Service16

PM Visualization Processing Service17

Event Service18

Sets Profiler Service19

Input Filestore Service20

Scheduling Host Service21

List Of Values Scheduling Service22

PM Metric Aggregation Service23

Output Filestore Service24

Crystal Reports Processing Service25

Predictive Analytic Service26

BusinessObjects Enterprise Administrator's Guide 647

14Auditing Reports

Event and Detail reference tables

Page 42: BO Enterprise - Administrator's Guide (Auditing Reports).pdf

Application_Type_DescriptionApplica

tion_Type_ID

Program Scheduling Service27

Publication Scheduling Service28

Publishing Post Processing Service29

Publishing Service30

Replication Service31

PM Repository Management Service32

Single Sign-On Service33

Sets Query Service34

Process Analysis Service35

Web Intelligence Scheduling and Publishing Service36

Web Intelligence Processing Service37

Desktop Intelligence38

Search Service39

Multi-Dimensional Analysis Service40

Web Intelligence41

648 BusinessObjects Enterprise Administrator's Guide

Auditing Reports

14 Event and Detail reference tables