Querying User Activity Audit Information

You can query the user activity logs.

To access the Audit Manager you must be a member of the Administrators Group.

Click Administration.
In the Select Utility drop-down list, click Audit Manager.
Click the Create Audit Query page.

Under Search Criteria, limit the information returned by your query:

Note: If you do not specify any information on this page, your query returns a description of every audit record that is stored in the database.

To limit your query to a particular type of object, in the Item Type drop-down list, choose the object.

For example, you might want to see only audit messages referring to modifications of content crawlers.
To limit your query to objects of a particular name, in the Item Name box, type the text you want to search for and, in the drop-down list, choose whether you want your search for approximate or exact matches.

If you search for approximate matches, the portal returns items that include your text in any part of the name; if you search for exact matches, the portal returns only those items in which the item name equals the text you specify. For example, you could request only audit messages referring to actions on Sales content crawlers or Sales portlets by entering Sales in the text box and choosing Approximate.
To limit your query to actions performed by a particular user, in the Username box, type the text you want to search for and, in the drop-down list, choose whether you want to search for approximate or exact matches.
To limit your query to actions performed on a particular portal server, in the Server Name box, type the text you want to search for and, in the drop-down list, choose whether you want to search for approximate or exact matches.

For example, you could retrieve messages for all jobs run on the Automation Service named PortalJobs.
To limit your query to audit messages containing a particular word, in the Word in Message box, type the text you want to search for.

For example, to limit your query to all messages relating to a particular group, type the group name in this box.

To limit your query to particular types of messages, choose the types.

Message Type	Description
Item Change	Entries corresponding to every time an object is edited.
Item Deletion	Entries corresponding to every time an object is deleted.
Locked Account	Entries corresponding to every time a user account is locked after a number of failed login attempts.
Security Change	Entries corresponding to every time an object's security is edited.
User Login	Entries corresponding to every time a user successfully logs in to the portal.
Global System Change	Entries corresponding to every time an edit is made to the Global ACL Sync Map, the Global Property Map, the Global Document Type Map, the Global Object Property Map, or the User Information Property Map; every time job folders or Automation Services are registered; and every time global system settings are changed through the various portal utilities.

To limit your query to a particular period, in the Time Interval boxes, enter the starting and ending date and time you want to search.
Select the order in which you want to sort audit messages. By default, the most recent audit messages are displayed first. To change the sort to display the oldest audit messages first, choose Oldest to newest.
In the Results per page box, type the maximum number of messages to display per page.
Click the Run Query page.

Parent topic: Auditing User Accounts and Actions

Oracle WebCenter Interaction Administrator Guide

Querying User Activity Audit Information