Salesforce

When audit archived database is updated, does the _client-session tables get updated or not?

« Go Back

Information

 
TitleWhen audit archived database is updated, does the _client-session tables get updated or not?
URL Namewhen-audit-archived-database-is-imported-does-the-client-session-tables-get-updated-or-not
Article Number000173350
EnvironmentProduct: OpenEdge
Version: 11.x, 12.x
OS: All supported platforms
Other: Auditing
Question/Problem Description
When an audit archived database is updated, does the _client-session table get updated or not?
Does the _client-session table get updated when the long term storage database is updated with the auditload utility?
Does the database to store audit archive data record client login session information from the production audit enabled source database or the target archive database?
Are _client-session records deleted when audit data is archived with the auditarchive utility?
Steps to Reproduce
Clarifying Information
Error Message
Defect Number
Enhancement Number
Cause

 
Resolution
The _client-session table only stores data if the following conditions are met:
  1. The "Record Authenticated Client Sessions" Database Option is enabled for the database.
  2. A client session is authenticated using client-principal object along with the SET-CLIENT( ) or SET-DB-CLIENT( ) ABL code to assert the identity of the authenticated user, the user login is correctly registered in the _client-session table
The target (long-term) archive database itself is usually also enabled to record client session information however the data in this table from the source audit records must be copied to the audit archive database and is therefore part of the archive process. The record content will not be deleted as part of the same "auditarchive" process as this client session information could be used for other purposes than auditing. In other words, this table is not used only for auditing purposes, which is why there may be activity on this table when auditing is disabled/not enabled or even client login session information that have nothing to do with associated record content in the audit-trail.

To enable the Record Authenticated Client Sessions that access the audit archive database:
  1. Connect a client to the audit archive database.
  2. Go to: Data Admin -> Database Options
  3. Select: Record Authenticated Client Sessions.
To purge _Client-Session records:
First consider why the database is enabled to record them in the first place ( "Record Authenticated Client Sessions" )
Upgrade to OpenEdge 11.4 where an exclusive schema-lock issue was resolved (  Cannot purge data out of under _client-session table online. )  
/* simple code: transaction scope, if-available & error checking */
FOR EACH _client-session.
DELETE _client-session.
END.


 
Workaround
Notes
References to Other Documentation:

OpenEdge Programming Interfaces: Auditing, Recording application events, Managing audit event context - Generating client login session context
https://docs.progress.com/bundle/openedge-programmimg-interfaces/page/Generating-client-login-session-context.html   

OpenEdge Programming Interfaces: Application Security, Authenticating and managing user identity in ABL, Authenticating and setting user identity - Configuring login sessions
https://docs.progress.com/bundle/openedge-programmimg-interfaces/page/Configuring-login-sessions.html   

Progress Articles:

Duplicate records in _client-session table for both main database and audit archive database   
How to consolidate audit information from different databases into one database ?   
Keyword Phrase
Last Modified Date6/21/2021 10:47 AM

Powered by