audit not capturing....

[abhi900]

Hi,
I have enabled Auditing but nothing is getting written into it.

I can see under CMS>Settings> Auditing is Enabled and when I see the default folder /app/boe/bobje/Data/Auditing I can see the TXT files getting created but with 0KB.

Why nothing is getting writted into the DB as well?

Please advise,

regards

 

[hilfy]

Have you gone to the Servers in the CMC and turned on the events you want to audit for each server? That's the final step for turning on auditing.

-Dell

A computer only does what you actually told it to do - not what you thought you told it to do.

 

[abhi900]

Hilfy,

Yes I have turned on the Auditing for each server that I want to audit.

I have turned on AUdit Events for CMS / RAS / RAS1/ Crystal Server etc...

any other advise,

regards
abhi

 

[hilfy]

Which version of BO are you running?

-Dell


A computer only does what you actually told it to do - not what you thought you told it to do.

 

[abhi900]

HI,
I can see under CMS>Settings> Auditing is Enabled and when I see the default folder /app/boe/bobje/Data/Auditing I can see the TXT files getting created but with 0KB.

I have also logged onto the Server to check if Auditing is enabled or
not by using the following steps:-
Check that you have enabled the Audit database.

1) Navigate to the BO Installation Directory i.e bobje.
2) Run the script ./cmsdbsetup.sh from the above mentioned directory.
3) It would notify to mention the name of the Service Intelligence
Agent (SIA)
4) After mentioning the concerned SIA name, it notified to stop the
same if it is in running state at that particular point of time.
5)Once stopped the script listed the following:

Current CMS Data Source - CMSBO31S
Current Clustername - QCMC111zSINA
Current Auditing Data Source - CMSBO31S

Why nothing is getting written into the DB as well?

Please advise,

regards

ITS BO XI 3.1 SP2 / SOLARIS 10 / ORACLE 10.2.0 in 2 box clustered
environment.

 

[hilfy]

It looks like you're using the same database for both the CMS and for auditing. Do you have them both in the same schema too? That is not a recommended configuration and may be causing your issue.

If that's not the issue, you'll probably need to contact SAP support for assistance.

-Dell

A computer only does what you actually told it to do - not what you thought you told it to do.

 

[abhi900]

Thanks Hilfy,

I enabled tracing on the CMS and saw that CORBA was not able to connect to audit dB.

So yea now we are creating 2 different schema and will test this out again.

I guess this should resolve the problem.

however,
Can you please from your knowledge bank provide me on how to
find those reports which has maximum no. of lines when it is run.(report size)
Find report start run time and end times.

regards
abhi

 

[hilfy]

Report size is not something that you can get to - it's not stored anywhere in the CMS or Audit databases.

The report start and end times will be stored in the Audit database once you get that working.

Or, you can go into the Query Builder application and write a query against the CMS to get the information. (NOTE: The information in the CMS database is stored in fields that have a proprietary binary format - you can't query them directly. Instead you have to query through the SDK, which is what Query Builder does for you.) I don't remember the exact field names, but you could use something like the following query to get to it:

Select Top 1 * from CI_INFOOBJECTS where SI_INSTANCE = 1 and SI_KIND = 'Crystal Report'

Again, I don't have my reference material on this handy, so I'm not absolutely certain that the "kind" reference is correct - it may be just 'Crystal'.

-Dell

A computer only does what you actually told it to do - not what you thought you told it to do.

 

[abhi900]

HI Hilfy,

I finally got the auditing working and now capturing data.

I did create a different schema just for AUDIT purpose and it seems to capture all the data( not sure yet if its relevant data yet ?)

I have enabled all Events Under
CMS / Crystal Processing server / Adaptive Server / Event Server / RAS/ RAS1/ Ras2 / Crystal Cache Sever.

Now, we run reports through an API of WebSphere. So users run reports through Web browser rather than INFOVIEW etc.

Also reports are run during testing time by HP Performance Centre.
So just fire up a script which basically run different reports with diff parameters etc and all at once.

Now the Million Dollar question is :
What events do they get captured under CMS and I am still not able to view any start or end times of those reports run as well as the SIZE of those reports.

The duration filed is Null in our instance as I presume that this field gets populated if one is using INFOVIEW or if reports are scheduled to run ?

Please advise,

Regards
abhi

 

[hilfy]

If you're running reports interactively and not scheduling them, you will not be able to track start and end times - they're not saved anywhere. That data only shows on instances that have been scheduled.

Also, there is NOTHING in the cms or audit data that will tell you the size of the report.

If you're doing any scheduling of reports, you will also want to turn on auditing on the Crystal Job Server (for Crystal reports) and the Adaptive Job Server (for Webi reports).

-Dell

A computer only does what you actually told it to do - not what you thought you told it to do.

 

[abhi900]

Dell,

Does that mean I Cannot even know how many open concurrent / connections does a CMS opens when interacting with RAS servers.

Or how many open connections did a CMS had over a 2 hour peak period etc ?

NO such information is stored either in AUdit DB or CMS database (Infoobjects6) etc ?

So if its a ad-hoc report then one cannot find the start and end times ?

It feels as if I am the only one who runs ad-hoc reports and not scheduling reports.

Please advise ..........anyone for that matter who has or worked on a Webshphere environment.

 

[hilfy]

For the CMS, you can track log-on and log-off - but they're in separate records so you'll have to find a way to link them together to get duration. Also, I'm not sure how it's handled when a user just closes the browser and doesn't click on "Log Off", so the session is automatically closed after it times out.

For ad-hoc reports, you can get the time the report was opened, but the audit trail for RAS doesn't track when the data is refreshed or how long it takes.

-Dell

A computer only does what you actually told it to do - not what you thought you told it to do.