Salesforce

What is the best way to move audit policies from one database to another?

« Go Back

Information

 
TitleWhat is the best way to move audit policies from one database to another?
URL NameP137619
Article Number000138527
EnvironmentProduct: OpenEdge
Version: 10.1x, 10.2x, 11.x, 12.x
OS: All supported platforms
Other: Auditing
Question/Problem Description
What is the best way to move Audit Policies from one database to another ?
Can audit policies be exported from one database and imported to another audit-enabled database ?
Is it possible to dump audit policies from one database and load them into another ?
How to Dump and Load Audit Policies from one database to another ?
How to Dump and Load Audit Events used by the Application ?
Steps to Reproduce
Clarifying Information
Deploying Audit Policies and Application Events.
Error Message
Defect Number
Enhancement Number
Cause
Resolution
The Audit Administrator privilege is required to export Audit Policies from an audit enabled database and load the policy.

When the Audit Policy is dumped, the file cannot be modified before it is imported because the seal validation will fail. The purpose of audit policy export/import is in order to not have to manually create policies for every application audited database, not to modify existing policies as xml or .ad files. Once Policies have been created to audit database and application events, these can be exported then imported to another database which is enabled for Auditing.

A. Audit Policy Maintenance Tool menu (Data Dictionary)

The Audit Policy Maintenance Tool (apmt) is available on the Tools menu of any ADE tool which uses the API. Apart from configuring, updating, deleting policies and custom events it can also be used to export and import policies. APMT is only available on Windows and can be used to connect to remote audit enabled databases on Windows or Linux.

To Export existing policies to a xml file with the APMT:

  1. Connect to the current audit enabled database
  2. Select the Policy or Policies to be exported    
  • File/Export Policy ...
  • Supply path/file-name
  • Click OK to export Policies which will create an .xml file.

To Import Audit Policies with the APMT:

An Audit policy .xml file can be imported to another database once Auditing is enabled
  1. Connect to the new audit enabled database
  2. File/Import Policy ...
  3. Browse to path and select the policy .xml file-name
  4. Click OK to import the Policies from the .xml file
  5. File/Commit Changes

B. Data Administration 

Audit Policies can be dumped as either an .xml file or ASCII text .ad files and loaded using the standard Data Administration Load methodology
  • _aud-audit-policy.ad; 
  • _aud-field-policy.ad;
  • _aud-event-policy.ad; 
  • _aud-file-policy.ad

To Dump existing Policies:

  1. Connect to the current audit enabled database
  2. Admin/Dump Data and Definitions > Audit Policies/Dump as Text (.ad file) or Dump as XML file (.xml file)
  3. Select the Policy or Policies to be exported.     
  4. Supply path for .ad export or path and filename for .xml export
  5. Click OK to create the Audit Policy export

To Load Audit Policies:

The resulting .xml or .ad files can be imported once Auditing is enabled 
  1. Connect to the new audit enabled database
  2. Admin > Load Data and Definitions > Audit Policies > Load as Text (.ad file) or Load as XML file (.xml file)
  3. Supply path for .ad export or path and filename for .xml export
  4. Click OK to import the Audit Policies.

Audit Events

Events created for application specific auditing are typically created using the Audit Policy Maintenance Tool. Event ID's of 32000 or greater are available for Application Events, anything lower than 32000 is reserved for internal events.

As outlined above:
  • The Events Maintenance Tool (in APMT) can be used to export then import events (.evt)
  • The Data Administration UI can be used to dump and load events:
Admin > Dump > Audit > Audit Events

C.  Deploy Audit Policy and Events with scripting

Once required Audit Policies and application specific events have been designed to meet the requirements of the Audit Authority, these can be deployed to customer sites with ABL code provided in the prodict library.  The following Article provides examples:
Workaround
Notes
Keyword Phrase
Last Modified Date11/20/2020 6:50 AM

Powered by