BO Enterprise - Administrator's Guide (Auditing Reports).pdf
Transcript of BO Enterprise - Administrator's Guide (Auditing Reports).pdf
Auditing Reports
14
Using auditing reports
If you are an administrator who wants to view reports from the auditing
database, you have these choices:
• You can use the auditing reports that are included with BusinessObjects
Enterprise.
• You canmodify the auditing reports that are included with BusinessObjects
Enterprise.
• You can create your own auditing reports.
Why are reports important?
Auditor includes reports that can answer questions youmay have about your
BusinessObjects Enterprise deployment. Each report contains one or more
report sections that focus on a very specific area.
608 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Using auditing reports
Table 14-1: Questons Auditing can answer
ReportQuestionCategory
Average Number of
Users Logged In
How many users are on my sys-
tem?
User Information
Average Session Dura-
tion
What is the average session dura-
tion?
Average Session Dura-
tion per User
What is the average session dura-
tion per user?
IP Addresses Access-
ing My Cluster
From where are users logging into
my system?
Jobs per UserHowmany jobs were processed per
user?
Last Login for UserWhen was the last time a specific
user used the system?
Most Active UsersWho is using the system the most?
(by refresh or by login)
Number of User Ses-
sionsNumber of logged in sessions
Number of Users in the
System
How many users have used the
system?
PasswordModificationsWhose passwords have been
modified?
Users Who Logged Off
IncorrectlyWho does not log out correctly?
BusinessObjects Enterprise Administrator's Guide 609
14Auditing Reports
Using auditing reports
ReportQuestionCategory
Average Refresh TimeWhat is the average time for docu-
ments to refresh?
Document Info-
mation
Document Information
DetailDocument Usage Analysis
Document Scheduling
and Viewing Status
How often have documents been
scheduled and viewed?
Least Accessed Docu-
ments
What are the 10 least viewed, edit-
ed, and refreshed documents?
Most Accessed Docu-
ments
What are the 10 most viewed, edit-
ed, and refreshed documents?
Most Popular Actions
per Document
What are the most popular actions
per document?
Operations on Docu-
ments
How often has an operation been
performed on a document?
Publishing AuditingHow often have documents been
published?
Average Session Dura-
tion per Cluster
What is the average session dura-
tion per cluster?
System Informa-
tion
Job Services on the
SystemHowmany Job Services do I have?
Job SummaryHow many jobs are there?
Jobs per Job Service
Type
Howmany jobs were processed per
Job Service?
Services in the ClusterHow many audited servers do I
have?
610 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Using auditing reports
ReportQuestionCategory
Most Popular ActionsWhat are the most popular actions?
Impact Analysis
Peak Usage
How many users are accessing my
system daily and when is the most
popular time?
Refresh and Edit Activi-
ty
Are my users editing reports or only
refreshing them?
Rights ModificationWhat objects have had their rights
changed?
Total Users Logged In
by Day
How many users are on my sys-
tem?
User ActivityWhat is my users activity by month,
week, day?
User Activity per Ses-
sionWhat do the users do?
Auditing report names
This section contains the following:
• the list of the report names
• the report sections included with the reports
• the report prompts
Note:
Folder path prompts will not automatically include objects/documents in
subfolders below the selected folder. For example, selecting the folder
toplevel will show results for all documents in the toplevel folder, but not
for any objects/documents in the toplevel/sublevel folder. To see
objects/documents in all subfolders, enter toplevel%.
BusinessObjects Enterprise Administrator's Guide 611
14Auditing Reports
Using auditing reports
Average Number of Users Logged In
The average number of sessions and users logging in over a given period
of time.
Report promptsReport sections
Select a start and end date.
Average Number of Sessions
Users Logged In
Average Number of Users Logged In
Average Refresh Time
The average refresh time per document, user, or cluster over the specified
time period.
Report promptsReport sections
Enter a folder path and document type,
select a start and end date.
Average Refresh Time by Document
Average Refresh Time by User
Average Refresh Time by Server
Average Session Duration
The average duration of user sessions, broken down by year, quarter, month,
week, day, or hour.
Report promptsReport sections
Enter User name, select a start and
end date.
Year
Quarter
Month
Week
612 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Using auditing reports
Report promptsReport sections
Day
Hour
Average Session Duration per Cluster
The average duration of sessions for a cluster of servers, by year, month,
week, or day.
Report promptsReport sections
Select a start and end date.
Average Session Duration in Minutes
per Year
Average Session Duration in Minutes
per Month
Average Session Duration in Minutes
per Week
Average Session Duration in Minutes
per Day
Average Session Duration per User
The average duration of specific users' sessions, by year, month or week.
Report promptsReport sections
Select a start and end date.
Average Session Duration in Minutes
over the Year
Average Session Duration in Minutes
per Month per User
Average Session Duration in Minutes
per Week per User
BusinessObjects Enterprise Administrator's Guide 613
14Auditing Reports
Using auditing reports
Cluster Nodes
The names of all servers in the audit cluster.
Report promptsReport sections
NoneServers in the Cluster
Document Information Detail
Provides details of actions performed on a given document.
Report promptsReport sections
Enter document name and folder path,
select a start and end date.Document Information
Document Scheduling and Viewing Status
The status of document jobs and views over a specified period of time.
Report promptsReport sections
Enter folder path, select start and end
date.
Scheduleing Status
Crystal Reports Viewing Status
Web Intelligence Viewing Status
Desktop Intelligence Viewing Status
IP Addresses Accessing My auditing Clusters
The IP addresses or machine names of clients accessing the audit cluster.
614 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Using auditing reports
Report promptsReport sections
Select start and end date.
IP Addresses Accessing My auditing
Clusters by IP - Day
IP Addresses Accessing My auditing
Clusters by IP - Month
IP Addresses Accessing My auditing
Clusters by Name - Day
IP Addresses Accessing My auditing
Clusters by Name - Month
Jobs per Job Service
Number of jobs per server type, kind, or specific server.
Report promptsReport sections
None
Jobs per Job Server Kind- Summary
Jobs per Job Server Kind
Jobs per Job Service
Job Services on System
Number of job services on the system, and the duration of any jobs in seconds
(optional).
Report promptsReport sections
None
Job Services
Job Services and Duration of Jobs
(sec)
BusinessObjects Enterprise Administrator's Guide 615
14Auditing Reports
Using auditing reports
Job Summary
Number of jobs on the system by status, or number of successfully completed
or failed jobs over a given period.
Report promptsReport sections
Enter folder path, select start and end
date.
Jobs per Status
Successful Jobs
Failed Jobs
Jobs per User
A summary of the number of jobs and their durations a user has initiated
over a given period of time.
Report promptsReport sections
Select start and end date.
Jobs per User - Summary
Jobs per User
Job Duration per User
Job Failures per User
Last Login for User
Last date and time to the second that a given user logged in to the system.
Report promptsReport sections
Enter User name, select start and end
date.Last Login for User
616 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Using auditing reports
Least Accessed Documents
Identifies the least popular documents by times read, edited or refreshed
over a given period.
Note:
Documents that are never accessed it will not generate any events and not
show up as part of this report.
Report promptsReport sections
Select document type and enter folder
path, select start and end date.
Least Accessed Documents - By times
Read
Least Accessed Documents - By Edits
Least Accessed Documents - By Re-
freshes
Most Accessed Documents
Most used documents based on times read, edited or refreshed over a given
period.
Report promptsReport sections
None
Most Accessed Documents - By times
Read
Most Accessed Documents - By Edits
Most Accessed Documents - By Re-
freshes
Most Active Users
A list of the system's most active users over a given period of time.
BusinessObjects Enterprise Administrator's Guide 617
14Auditing Reports
Using auditing reports
Report promptsReport sections
Select start and end date.
Most Active Users by Logins
Most Active Users by Refreshes
Most Popular Actions
Quantity of the most popular actions during a given time period
Report PromptsReport Sections
Select start and end date.
Most Popular Actions per Year
Most Popular Actions per Quarter
Most Popular Actions per Month
Most Popular Actions per Week
Most Popular Actions per Day
Most Popular Actions per Document
Auantity of the most popular actions for a specified document during a given
time period or by specified user.
618 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Using auditing reports
Report promptsReport sections
Select document name and enter folder
path, select start and end date.
Most Popular Actions per Document-
By User
Most Popular Actions per Document-
By Session
Most Popular Actions per Document-
By Action
Most Popular Actions per Document-
By Month
Number of User Sessions
Total number of user sessions for a cluster organized per year, month, week,
and day.
Report promptsReport sections
Select start and end date.
by Month
by Week
by Day
Number of Users in the System
The number of users in the system at the time the report is run.
Report promptsReport sections
NoneNumber of Users in the System - Active
Users
BusinessObjects Enterprise Administrator's Guide 619
14Auditing Reports
Using auditing reports
Operation on Documents
The types of operations performed on specified documents, by time, type,
user and document, or user.
Note:
Only document types that have generated auditing events will appear in the
Document Type prompt dropdown.
Report promptsReport sections
Enter user name, Document type and
folder path, select operation and start
and end date.
Operation on Documents - By Time
Operation on Documents - By Opera-
tion Type
Operation on Documents - By User and
Document
Operation on Documents - By User
Password Modifications
A summary of password modification operations over a specified period of
time.
Report promptsReport sections
Select start and end date.
Password Modifications - By Month
Password Modifications - By Week
Password Modifications - By Details
Peak Usage
Charts the peaks of user logins, session logins or number of actions
performed over a given period of time.
620 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Using auditing reports
Report promptsReport sections
Select start and end date.
Users Login Peaks
Session Login Peaks
Number of Action Peaks
Publishing auditing
Publication activity for a specific document over a given period of time.
Report promptsReport sections
Enter publication name, select start and
end date.Publishing Auditing
Refresh and Edit Activity
Number of edit and refresh actions per document trace, per cluster, and per
selected user over a given period.
Report promptsReport sections
Select user name, document name and
folder path, select start and end date.
Refresh and Edit Activities of Web In-
telligence Documents
Rights Modification
A summary of security activities for a specified folder over a given period of
time.
Report promptsReport sections
Select folder path, select start and end
date.
Rights Modification - By User
Rights Modification - By Object
BusinessObjects Enterprise Administrator's Guide 621
14Auditing Reports
Using auditing reports
Services in the Cluster
Report promptsReport sections
None.Services in the Cluster
Total Users Logged In by Day
A summary of the number of users or sessions logged in over a given time
period, broken down by day.
Report promptsReport sections
Select start and end date.
Total Users Logged In by Day -Total
Number of Logged In Users
Total Users Logged In by Day - Total
Number of Logged in Sessions
User Activity
Number of users using the system per month, week, or day within a given
time period.
Report promptsReport sections
Select start and end date.
User Activity by Month
User Activity by Week
User Activity by Day
User Activity per Session
Analyses user activity for the whole content of the audit database per cluster,
session, action, or date.
622 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Using auditing reports
Report promptsReport sections
Enter user name, select start and end
date.
User Activity per Session Per Cluster
User Activity per Session Per Session
User Activity per Session Per Action
Name
User Activity per Session Per Date
Users Who Logged Off Incorrectly
Of the users who logged in during a given period, which ones failed to log
off correctly.
Report promptsReport sections
Select start and end date.
Statistics
Users Who Logged Off Incorrectly
Viewing sample auditing reports
To view sample auditing reports
1. Log on to InfoView.
2. Click Public Folders.
3. Click Auditing Reports.
4. Click the language folder of your choice.
A list of sample auditing reports is displayed.
5. Open the report you want to view.
• To open a Web Intelligence auditing report, click on the report you
want to view.
BusinessObjects Enterprise Administrator's Guide 623
14Auditing Reports
Viewing sample auditing reports
• To open a Crystal Reports auditing report, open the object package,
and then open the report you want to view.
Creating custom auditing reports
This section contains information to help you understand the auditing
database, the Activity universe and the information it records about auditing
actions. With this information, you can use Crystal Reports, Web Intelligence
or Desktop Intelligence to create custom auditing reports of user and system
actions.
Auditing database schema reference
The auditing database contains six tables:
• Audit_Event on page 624
• Audit_Detail on page 625
• Server_Process on page 626
• Detail_Type tables on page 628
• Event_Type on page 627
• Application_Type on page 628
The following diagram shows the schema of the auditing database.
Audit_Event
The Audit_Event table stores one record per action that is audited and
contains general information about each auditing event.
624 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Creating custom auditing reports
DescriptionField
Server and service ID. Combined with the Event_ID to form
the primary key for the Audit_Event table.Server_CUID
A unique ID generated by the server to identify the auditing
event. Combined with Server_CUID to form the primary
key for the Audit_Event table.
Event_ID
Name of user who performed the action.User_Name
Time for start of action in UTC (Coordinated Universal Time)
to the nearest millisecond. The time stamp is created by the
server recording the action in its log file, and includes any
correction necessary to synchronize with CMS time. You
may want to correct this time to your local time zone when
creating auditing reports.
Start_Times
tamp
Duration, in seconds, of the action that is audited.Duration
Number that uniquely identifies the type of action the entry
represents. Foreign key for the Event_Type table.Event_Type_ID
Info Object CUID of object associated with the action. This
number uniquely identifies an object such as a document,
folder or user.
Object_CUID
Identifies the program that initiates the action, such as Web
Intelligence, Desktop Intelligence, Crystal Reports, or Voy-
ager.
Object_Type
Field reserved for error codes.Error_Code
Audit_Detail
The Audit_Detail table records more details about each auditing action
recorded in the Audit_Event table. For example, when a user logon fails,
the reasons for that failure are recorded as auditing details.
BusinessObjects Enterprise Administrator's Guide 625
14Auditing Reports
Auditing database schema reference
There may be more than one record in this table for each auditing action
recorded in the Audit_Event table.
DescriptionField
Combination of the Server and Service CUID responsible
for the event. Combined with the Event_ID and the
Detail_ID to form the primary key for the Audit_De
tailtable.
Server_CUID
A unique ID generated by the server to identify the audit-
ing event. Combined with Server_CUID and the De
tail_ID to form the primary key for the Audit_Detail
table.
Event_ID
The Detail_ID field is used to number the individual
details associated with each auditing action (i.e. if there
are two details associated with a particular auditing ac-
tion, the first will have a Detail_ID of 1, and the second
will have a Detail_ID of 2).
Detail_ID
Number that uniquely identifies the type of detail about
the auditing action that the entry represents. Foreign key
for the Detail_Type table.
Detail_Type_ID
Information about the auditing detail being recorded. For
example, if the Detail_Type_Description were
"universe name", the detail text would contain the name
of that universe.
Detail_Text
Server_Process
The Server_Process table contains information about the servers and
services running within your BusinessObjects Enterprise system which can
generate auditing events.
626 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Auditing database schema reference
DescriptionField
Combination of the Server and Service
CUID of the server InfoObject that cre-
ated the event. Primary key for the
Server_Process table.
Server_CUID
Machine name of the server that pro-
duced the action. That is, the host
name.
Server_Name
A unique ID that identifies the type of
application that generated the auditing
action. Foreign key to the Applica
tion_Type table.
Application_Type_ID
Name of the server and service that
initiated the action. The names are the
same as those displayed in the CMC.
The default name is host
name.servertype.
Server_FullName
Version of BusinessObjects Enterprise
on server that produced the action.Server_Version
Event_Type
The Event_Type table contains a static list of the kinds of events that can
be audited in your BusinessObjects Enterprise system. This table provides
information roughly equivalent to that provided by AuditIDs and AuditStrings
in Crystal Enterprise
DescriptionField
Number that uniquely identifies the type
of auditing event that the entry repre-
sents.
Event_Type_ID
BusinessObjects Enterprise Administrator's Guide 627
14Auditing Reports
Auditing database schema reference
DescriptionField
Description of the type of auditing
event.Event_Type_Description
Application_Type
The Application_Type table contains a static list of the applications that
can produce auditing events.
DescriptionField Name
A unique ID that identifies the type of
application that generated the auditing
action.
Application_Type_ID
The description of the application gen-
erating the auditing event.Application_Type_Description
Detail_Type tables
The Detail_Type table contains a static list of the standard details that can
be recorded about audited events. For example, a user logon can fail for a
number of different reasons. These reasons are listed as entries in the De
tail_Type table.
The information in the Detail_Type table is equivalent to the information
that was recorded in variable AuditStrings in Crystal Enterprise 10.
DescriptionField
Number that uniquely identifies the type of
auditing detail that the entry represents.Detail_Type_ID
628 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Auditing database schema reference
DescriptionField
The description of the type of auditing detail
generated by the auditing event.Detail_Type_Description
Event and Detail reference tables
The following tables list the Event_Type_ID and Event_Type_Description
of all events that can be audited in your system. For your convenience, these
events are ordered according to the service that generates each type of
event.
The following table shows and example event.
Detail TextDetail Descrip-
tion
De-
tail
ID
Event DescriptionEvent
ID
AdminUser Groups42Concurrent user lo-
gon succeeded.65537
1234Session ID45Concurrent user lo-
gon succeeded.65537
123.456.101.100IP address report-
ed by client60
Concurrent user lo-
gon succeeded.65537
host.domain.comHostname report-
ed by client61
Concurrent user lo-
gon succeeded.65537
123.456.101.100IP address re-
solved by server62
Concurrent user lo-
gon succeeded.65537
host.domain.comHostname re-
solved by server63
Concurrent user lo-
gon succeeded.65537
BusinessObjects Enterprise Administrator's Guide 629
14Auditing Reports
Event and Detail reference tables
Detail TextDetail Descrip-
tion
De-
tail
ID
Event DescriptionEvent
ID
juserConcurrent user
account89
Concurrent user lo-
gon succeeded.65537
The following tables list the Event_Type_ID code for the event, the
description, and any details that will be associated with that event followed
by their Detail_ID codes in parenthesis.
CMS auditing events
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Concurrent User Count (89)
• Hostname reported by client (61)
• Hostname resolved by server (63)
• IP address reported by client (60)
• IP Address resolved by server (62)
• Session ID (45)
• User Groups (42)
Concurrent user logon suc-
ceeded.65537
• Concurrent User Count (89)
• Hostname reported by client (61)
• Hostname resolved by server (63)
• IP address reported by client (60)
• IP address resolved by server (62)
• Session ID (45)
• User Groups (42)
Named user logon succeed-
ed.65538
• Concurrent User Count (89)
• Session ID (45)
• User Groups (42)
User logged off.65540
• Session ID (45)
• User Groups (42)User password has been
changed.65541
630 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Enterprise Error Text (46 )
• Hostname reported by client (61)
• Hostname resolved by server (63)
• IP address reported by client (60)
• IP address resolved by server (62)
• Logon using token (64)
• User Groups (42)
User logon failed.65539
• Object CUID (92)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Object Type (50)
• Parent Document CUID (91)
• Session ID (45)
• User Groups (42)
Note:
This auditing string will not be recorded when
a new user account is created, even though
a new folder is created for each new user.
Object created.65542
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Object Type (50)
• Session ID (45)
• User Groups (42)
Object deleted.65543
BusinessObjects Enterprise Administrator's Guide 631
14Auditing Reports
Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Object CUID (92)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Object Type (50)
• Parent Document CUID (91)
• Session ID (45)
• User Groups (42)
Object modified.65544
Unresponsive scheduling.65545
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Object Type (50)
• Parent Document CUID (91)
• Session ID (45)
• User Groups (42)
Object Rights Modified65544
Cache service auditing events
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• Report Data Type (51)
• User Groups (42)
Report Viewing Succeeded.196609
• Enterprise Error Text (46)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• User Groups (42)
Report Viewing Failed.196610
632 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
Job service auditing events
For scheduled objects (by clients or servers), the auditing messages give
you information about the status of scheduled actions. For example, the
auditing messages can tell you if a scheduled report ran successfully.
For the Destination Job service, the auditing messages give you information
on whether an object was sent to a destination, as requested by a user.
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• Universe name (2)
• User Groups (42)
Job successful.327681
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• Universe name (2)
• User Groups (42)
Job failed.327682
• Object CUID (92)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Template Document (91)
• Universe Name (2)
• User Groups (42)
Note:
For more information on scheduling jobs,
see the BusinessObjects Enterprise Ad-
ministrator's Guide.
Job failed. Job will be retried
by the CMS.327683
BusinessObjects Enterprise Administrator's Guide 633
14Auditing Reports
Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Destination Delivery Type (66)
• Destination Type (65)
• Document Scope (81)
• Document size (9)
• Domain (71)
• File Name (68)
• From Address (73)
• Host Name (70)
• Object CUID (92)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Port (72)
• Publication Instance ID (82)
• Recipient Name (80)
• Template Document CUID (91)
• To Address (74)
• User Groups (42)
• User Name (69)
Destination Delivery Succeed-
ed327687
634 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Destination Delivery Type (66)
• Destination Type (65)
• Document Scope (81)
• Document size (9)
• Domain (71)
• Error Message (76)
• File Name (68)
• From Address (73)
• Host Name (70)
• Object CUID (92)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Port (72)
• Publication Instance ID (82)
• Recipient Name (80)
• Template Document CUID (91)
• To Address (74)
• User Groups (42)
• User Name (69)
Destination Delivery Failed327688
Event service auditing events
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Event filename (41)
• Event ID (40)Event registered262145
• Event Filename (41)
• Event ID (40)Event unregistered262146
• Event filename (41)
• Event ID (40)Event updated262147
BusinessObjects Enterprise Administrator's Guide 635
14Auditing Reports
Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Event filename (41)
• Event ID (40)Event triggered262148
Report Application service auditing events
The Report Application service (RAS) is used to create reports using custom
applications developed with the RAS SDK. All of the following codes will be
generated by custom applications. Consult your RAS SDK documentation
for additional details.
636 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Object CUID (92)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• User Groups (42)
Report was opened for viewing
and/or modification
Note:
In a few cases, this
Event_Type_IDmay be generat-
ed when the report opens but
cannot be viewed. This may oc-
cur when:
• There are problems with the
database setup for the report.
For example, you may see
this message when the
database driver for the report
is not present on the client
machine
• A processing extension asso-
ciated with the report aborts
viewing, or fails.
• The report used Business
Views and the user did not
have permissions to refresh
the underlying data connec-
tions.
• Themachine running the RAS
ran out of space in its tempo-
rary directory.
458753
Report was saved to the CMS.458754
Report was created and saved to
the CMS458755
Report could not be opened.458756
Report could not be saved to the
CMS.458757
BusinessObjects Enterprise Administrator's Guide 637
14Auditing Reports
Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
Report could not be created in
the CMS.458758
Web Intelligence and Desktop Intelligence auditing events
Note:
• The list of auditable events for Desktop Intelligence andWeb Intelligence
Rich Client only apply when the client is actively logged in to
BusinessObjects Enterprise. If the client is being use in an offline mode
then events will not be recorded.
• If a document is imported to the Web Intelligence Rich Client and worked
on as a local document, all auditing events regarding that document will
be reported as Web Intelligence client events and contain the details
(name, CUID etc.) of the locally saved version of that document, not the
repository version. Repository events will be reported by the Web
Intelligence Processing Server, and client events will be reported by the
Adaptive Processing Server with Client Auditing Proxy Service enabled.
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Number of elements (7)
• Session ID (45)
• User Groups (42)
List of Universes Retrieved6
• Description (14)
• Document name (8)
• Document size (9)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Options Refreshed (17)
• Overwrite (18)
• Session ID (45)
• User Groups (42)
Document Saved9
638 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Document name (8)
• Document size (9)
• Object CUID (92)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• Session ID (45)
• User Groups (42)
Document Retrieved11
• Session ID (45)
• Universe Name (2)
• User Groups (42)
Universe Selected13
• Document Name (8)
• Number of lines (6)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• Session ID (45)
• SQL value (19)
• Universe name (2)
• User Groups (42)
Document refreshed
Note:
This event will also occur
when a user creates a docu-
ment
19
• Number of lines (6)
• Object Name (3)
• Session ID (45)
• Universe name (2)
• User Groups (42)
List of Values Retrieved21
• Document name (8)
• Session ID (45)
• User Groups (42)
Document Edited22
BusinessObjects Enterprise Administrator's Guide 639
14Auditing Reports
Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Document name (8)
• Report name (22)
• Session ID (45)
• User Groups (42)
Apply format28
• Document name (8)
• Document type (21)
• Object CUID (92)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• Session ID (45)
• User Groups (42)
Get page40
• Document name (8)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• Session ID (45)
• SQL value (19)
• Universe name (2)
• User Groups (42)
SQL Generated41
• Document name (8)
• Number of lines (6)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Session ID (45)
• SQL value (19)
• Universe name (2)
• User Groups (42)
Drill out of scope42
640 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
Event Details (Detail_ID)Event_Type_DescriptionEvent_Type_ ID
• Document name (8)
• Object Folder Path (43)
• Object instance (90)
• Object Name (3)
• Parent Document CUID (91)
• Prompt Named
• Prompt value
• Session ID (45)
• User Groups (42)
Prompt Selected43
sendtousers50
• Object Folder Path (43)
• Object Name (3)
• User Groups (42)
startdesktopapp
Note:
Desktop Intelligence only.51
Voyager auditing events
Event Details (Detail_ID)Event_Type_Descrip
tionEvent _Type_ID
• Object Folder Path (43)
• Object Name (3)
• User Groups (42)
MDAS Session Creation12500
• Object Folder Path (43)
• Object Name (3)
• User Groups (42)
MDAS Session Closed12501
• Object Folder Path (43)
• Object Name (3)
• User Groups (42)
MDAS Cube Connection
Opened12502
BusinessObjects Enterprise Administrator's Guide 641
14Auditing Reports
Event and Detail reference tables
Event Details (Detail_ID)Event_Type_Descrip
tionEvent _Type_ID
• Object Folder Path (43)
• Object Name (3)
• User Groups (42)
MDAS Cube Connection
Closed12503
• Object Folder Path (43)
• Object Name (3)
• User Groups (42)
MDAS Connection Fail-
ure12504
Client events
DescriptionEvent_Type_De
scription
Event_Type_
ID
Triggered by a Desktop Intelligence application sending
an object to a user.sendtousers50
Triggered by the startup of Desktop Intelligence.startdesktopapp51
Detail Codes reference table
DescriptionDetail_DescriptionDetail_ID
Universe name2
Object Name3
Number of lines6
Number of elements7
Document name8
Document size9
Description14
642 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
DescriptionDetail_DescriptionDetail_ID
Category name15
Keywords16
Options Refreshed17
Overwrite18
SQL value19
Document type21
Report name22
Prompt Named23
Prompt value24
Data Provider Name30
Page Range31
Event ID40
Event Filename41
User Groups42
Object Folder Path43
Object Category Path44
Session ID45
Enterprise Error Text46
ODBC SQLSTATE47
ODBC Error Text48
BOE UserID49
BusinessObjects Enterprise Administrator's Guide 643
14Auditing Reports
Event and Detail reference tables
DescriptionDetail_DescriptionDetail_ID
Object Type50
Report Data Type51
Triggered during thick-client (CORBA) lo-
gon. Records the IP adress reported by
the client.
IP address reported by
client60
Triggered during thick-client (CORBA) lo-
gon. Records the host machine name re-
ported by the client.
Hostname reported by
client61
Triggered during thin and thick client lo-
gon. Records the IP address of the client
as reported by the server. This is more
reliable than "IP address reported by
client", but servers may not be able to
correctly resolve IP addresses on some
networks.
IP address resolved by
server62
Triggered during thin and thick client lo-
gon. Records the host machine name of
the client as reported by the server. This
is more reliable than "hostname reported
by client", but servers may not be able to
correctly resolve client host names on
some networks.
Hostname resolved by
server63
Logon using token64
Indicates intended destination of job
(printer, folder, email, etc.).Destination Type65
Indicates if job was a scheduled operation
or user initiated.
Destination Delivery
Type66
Records the directory the object or in-
stance is transferred to. Triggered only if
a job is communicated using FTP.
Directory67
644 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
DescriptionDetail_DescriptionDetail_ID
Records the file name of the object or in-
stance. Triggered only if a job is communi-
cated using FTP ro email.
File Name68
Records the name of the user who request-
ed the event. Triggered only by user-initi-
ated delivery of an object.
User Name69
Records the name of the host machine of
the intended recipient of the object or in-
stance. Triggered by only if a job is pub-
lished by email or FTP.
Host Name70
Records the email domain it is sent to.
Triggered by only if a job is published by
email.
Domain71
Records the port used in the file transfer.
Triggered only if a job is communicated
using FTP or email.
Port72
Triggered only by email delivery of object.From Address73
Triggered only by email delivery of object.To Address74
Triggered only by email delivery of object.CC Address75
Records any error messages generated
by the failure of a job.Error Message76
Records the name of the intended recipi-
ent (if provided by the job).Recipient Name80
Document Scope81
Records a unique instance ID for that
event.Publication Instance ID82
Concurrent User Count89
BusinessObjects Enterprise Administrator's Guide 645
14Auditing Reports
Event and Detail reference tables
DescriptionDetail_DescriptionDetail_ID
Object instance90
Parent Document CUID91
Object CUID92
Right added93
Right removed94
Right modified95
Number of Copies
Printed100
MDAS General Failure12500
MDAS Credential Fail-
ure12501
Application_Type table reference
Application_Type_DescriptionApplica
tion_Type_ID
PM Rules Service0
Dashboard Analytics Service1
Client Auditing Proxy Service2
Auditing Service3
Scheduling Host Service4
Crystal Reports Scheduling Service5
Crystal Reports Cache Service6
646 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables
Application_Type_DescriptionApplica
tion_Type_ID
Central Management Service7
Connection Service8
Crystal Reports Viewing and Modification Service9
Dashboard Service10
Desktop Intelligence Scheduling Service11
Desktop Intelligence Cache Service12
Desktop Intelligence Processing Service13
Destination Delivery Scheduling Service14
Destination Configuration Service15
PM Visualization Cache Service16
PM Visualization Processing Service17
Event Service18
Sets Profiler Service19
Input Filestore Service20
Scheduling Host Service21
List Of Values Scheduling Service22
PM Metric Aggregation Service23
Output Filestore Service24
Crystal Reports Processing Service25
Predictive Analytic Service26
BusinessObjects Enterprise Administrator's Guide 647
14Auditing Reports
Event and Detail reference tables
Application_Type_DescriptionApplica
tion_Type_ID
Program Scheduling Service27
Publication Scheduling Service28
Publishing Post Processing Service29
Publishing Service30
Replication Service31
PM Repository Management Service32
Single Sign-On Service33
Sets Query Service34
Process Analysis Service35
Web Intelligence Scheduling and Publishing Service36
Web Intelligence Processing Service37
Desktop Intelligence38
Search Service39
Multi-Dimensional Analysis Service40
Web Intelligence41
648 BusinessObjects Enterprise Administrator's Guide
Auditing Reports
14 Event and Detail reference tables