Troubleshooting Audit Policies

Problems with your audit policy typically are best addressed through policy rule debugging.

To debug a rule, add the following trace elements to the rule code.

<block trace=’true’>
<and>
    <contains>
        <ref>accounts[AD].firstname</ref>
        <s>Sam</s>
    </contains>
    <contains>
        <ref>accounts[AD].lastname</ref>
        <s>Smith</s>
    </contains>
</and>
</block>

• If you cannot see your workflow in the Identity Manager interface, confirm that

  • You have added the subtype=’SUBTYPE_REMEDIATION_WORKFLOW’ attribute to your workflow. Workflows without this subtype are not visible in the Identity Manager Administrator interface.

  • You have the capability for authType AuditorAdminTask.

  • You control the organization containing the workflow.

• If you imported rules, but do not see them in the Audit Policy Wizard, confirm that

  • Each rule is of subtype=”SUBTYPE_AUDIT_POLICY_RULE’ or subtype=”SUBTYPE_AUDIT_POLICY_SOD_RULE’.

  • You have the capability for authType AuditPolicyRule.

  • You control the organization containing the workflow.