Audit Properties

The following properties apply to a system's Audit Log. Properties include Audit Control properties, Audit Event properties, and Audit Log properties.

Audit Controls


Audit Logging On?

Indicates the current auditing status. Use this control to enabled or disable auditing.

Audit Events

Displays the system events that can be audited, for example, Add Object. Double-click any listed audit event to display and modify the event properties

Audit Log

Contains the audit log objects that track the logged events. Double-click any logged event to display the audit log properties that describe the event.

Current Set Number

Displays the numeric value assigned to each logged audit event in the Audit Log. The system increments this value each time the Audit Log is dumped. The system assigns and maintains this value and it is not user modifiable.

Audit Log Events


Audit Event

Displays the audit events the library system will log. When you double-click on any event, a properties dialog box appears where you can set the Log on Success? and Log on Failure? properties for the selected event. You can also access this dialog box by right-clicking the listed event and choosing Properties.

Log Failure?

Indicates whether events that fail will be logged. The system supplies no initial value. Choose Yes or NO.

Log Success?

Indicates whether events that succeed will be logged. The system supplies no initial value. Choose Yes or NO.

Audit Log Properties


Audit Event ID

Identifies the logged event.

Date Time

Displays the date and time the audit event occurred.

Elapsed Time

Displays the elapsed time, in milliseconds, required to complete the audit event.

Filename

Displays the filename referenced by the audit event. Add Item events store the filename for protected items in this field.

Flags

Indicates the flags specified for the audit event, if applicable.

Object ID

Identifies the type of object accessed (for example, item or user).

Object Key

Displays the key value of the audit event, if applicable. For example, the object key will contain the name of the user attempting a log on for a Logon event. The object key will also contain the name of the new group for a Change Group event.

Param 1

The values of event parameters depend on the type of operation. Most events use two or more event parameter fields to create a parallel list format. The first parameter shows the list of property names while the second parameter shows the corresponding values. The following values apply to parameter 1:

Param 2

The values of event parameters depend on the type of operation. Most events use two or more event parameter fields to create a parallel list format. The first parameter shows the list of property names while the second parameter shows the corresponding values. The following values apply to parameter 2:

Param3

The values of event parameters depend on the type of operation. Most events use two or more event parameter fields to create a parallel list format. The first parameter shows the list of property names while the second parameter shows the corresponding values. The following values apply to parameter 3:

Param 4

The values of event parameters depend on the type of operation. Most events use two or more event parameter fields to create a parallel list format. The first parameter shows the list of property names while the second parameter shows the corresponding values. The following values apply to parameter 4:

Process ID

Displays the process ID of the program that initiated the audit event. The system assigns this ID.

Search Request Count

Indicates the number of hits returned by a search event. The value is NULL if the search fails.

Search Request Direction

Shows the search direction (ascending or descending) indicated by the search results. Applies only to search events.

Search Request Start Key

Displays the start key value for a search when the search is continued (that is, it indicates a starting point for the search results set. Applies only to search events.

Set Number

Displays the set number. This value comes from the Audit Control Current Set Number.

Status

Displays the status code returned by the audit event.

User

Displays the name of the library system user who initiated the audit event.

Workstation

Contains the workstation address of the client where the audit event originated.