Skip Headers
Oracle® Beekeeper Online Help
Release 1 (1.4)

Part Number E13799-02
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
View PDF

3 Managing Enterprises

This module contains describes how to manage Oracle Beehive enterprises using Oracle Beekeeper, and includes the following sections:

About Entities, Actors, and Artifacts

Managing Workspace Quotas

You can control the maximum disk space allowed for workspaces in your enterprise.

To manage workspace quotas for your entire enterprise:

  1. From the Enterprises panel, click Manage Enterprises.

  2. In the Manage Enterprises window, select your enterprise.

  3. Click the Quota Settings tab.

  4. Set specific quota limits for each type of quota. By default, each quota type is set to Unlimited.

    • Hard Quota: Set the total disk space allocated to your enterprise.

    • Sub-Organizations Hard Quota: Set the default disk space allocated to each sub-organization within your enterprise.

    • Team Workspace Hard Quota: Set the default disk space allocated to each team workspace within your enterprise.

    • Personal Workspace Hard Quota: Set the default disk space allocated to each personal workspace within your enterprise.

    • Team Workspace Soft Quota: Set the default quota level at which a warning event is created for each team workspace within your enterprise.

    • Personal Workspace Soft Quota: Set the default quota level at which a warning event is created for each personal workspace within your enterprise.

  5. Click Apply to save your changes to the quota settings. Alternatively, click Reset to discard your changes.

To manage quota for a single workspace:

  1. From the Enterprises panel, click the name of your enterprise.

  2. In the Manage Enterprises window, select a workspace.

  3. Click the Quota Settings tab.

  4. Set specific limits for hard and soft quotas. By default, each quota type is set to Unlimited.

  5. Click Apply to save your changes to the quota settings. Alternatively, click Reset to discard your changes.

Searching in Oracle Beekeeper

You can enter search strings in the Find field in the top-right corner of the main window to search for entities in Oracle Beekeeper. Alternatively, you can use the Advanced Search dialog box to perform searches.

Searches in Oracle Beekeeper are not case-sensitive.

Performing Simple Searches

In its most basic form, a search consists of an attribute, a keyword, and a match operator. An attribute is the criterion by which you intend to search for one or more Oracle Beehive entities. A keyword is the value for which you want to search. Generally, the match operator is :, which instructs Oracle Beekeeper to return all results for the searched attribute containing the given keyword.

You perform a simple search by entering search strings in the Find field and clicking the Search icon to begin your search.

Examples:

To perform a search for all users with the word 'developer' in their job titles, you would enter title:developer in the Find field. Alternatively, to search for all members of the accounting department, you would enter department:accounting in the Find field.

Complex Search Syntax

Oracle Beekeeper supports boolean expressions, nested predicates with parentheses, and the predefined attributes ANY and ALL.

  • Using the ANY attribute matches the keyword or keyphrase against any of the relevant search attributes.

  • Using the ALL attribute matches the keyword or keyphrase against all of the relevant search attributes.

If you want to specify multiple keywords for a given search, you must enclose them in double quotation marks. Multiple keywords in double quotation marks constitute a keyphrase.

Boolean Operator Oracle Beekeeper Symbol
contains :
AND &&
OR ||
NOT !

Example 3-1 Complex Syntax

In the Find field, enter the following text:

(givenname:john && familyname:coetzee) || (givenname:jamaica && familyname:kincaid)

Your search would return the following results:

  • Any user whose given name was John and whose family name was Coetzee

  • Any user whose given name was Jamaica and whose family name was Kincaid

Performing Advanced Searches

To perform an advanced search:

  1. Click the Advanced Search icon to launch the Advanced Search dialog box.

  2. From the Add pull-down menu, select an attribute and click +.

  3. Enter a word or part of a word in the field provided. To search for entities with an attribute containing the word you entered, select contains from the attribute's pull-down menu. Alternatively, to search for entities with an attribute that does not contain the word you entered, select does not contain from the attribute's pull-down menu.

  4. Optionally, repeat steps 2 and 3 to search for entities using more than one attribute.

  5. If you are searching using multiple attributes, select All to ensure that your search returns only entities that match all the attributes by which you are searching. Alternatively, select Any to ensure that your search returns entities that match any of the attributes by which you are searching.

  6. If you want to delete any attribute search you have created, click x next to the attribute field.

  7. Click Search. Your results are displayed in the main window behind the Advanced Search dialog box.

  8. Click Close to return to the main window.

Managing Users

A user, also referred to as an actor, is an entity that can act on other entities. Users can be assigned to groups, provisioned for services, and authorized to perform tasks and services.

All users are part of the enterprise directory, which is managed by the User Directory Service (UDS).

Note:

If you have configured Oracle Beehive to use an external directory server, you cannot create or modify users using Oracle Beekeeper.

Creating Users

To create a user:

  1. In the Enterprises panel, expand the Manage Enterprises navigation tree.

  2. Click Users.

  3. From the menu bar, click New.

  4. Click one of the tabs and enter user information:

    • General: Enter basic information such as first name and family name, time zone, user name, and password. You must provide a family name and a user name for the user.

    • Business: Enter official information such as company, organization, department, job title, and manager.

    • Contact Info: Enter contact information such as e-mail, phone, fax, and instant message address. You can also add or remove entries for each type of contact information using the + and x buttons. You can also select a primary entry from among the multiple entries for each contact information field, and categorize each contact information field under the Business, Personal, or Other category.

    • Groups: Lists the group or groups to which a user belongs. To add the user to a group, click Add, enter a name or part of a name in the Find field, and click the search icon to return a list of groups. Select a group from the list and click Add. Alternatively, hold down Ctrl to select multiple groups, and click Add. For more information, see Managing Groups.

    • Roles: Lists the role or roles assigned to the user. To assign a role to the user, click Add. Select a role from the list and click Add. Alternatively, hold down Ctrl to select multiple roles, and click Add. For more information, see Managing Roles.

  5. Click Save & Close to create the user and close the New User dialog box. Alternatively, click Apply to create the user without closing the dialog box.

Modifying Users

To modify information about a user:

  1. In the Enterprises panel, expand the Manage Enterprises navigation tree.

  2. Click Users.

  3. From the displayed list of users, select the user you want to modify.

  4. From the menu bar, select Actions, then Open.

  5. Update any or all user information. For more information, see Creating Users.

  6. Click Save & Close to save your changes and close the dialog box. Alternatively, click Apply to save your changes without closing the dialog box.

Deleting Users

To delete a user:

  1. In the Enterprises panel, expand the Manage Enterprises navigation tree.

  2. Click Users.

  3. From the displayed list of users, select the user you want to delete.

  4. Click Delete.

  5. Click Yes to confirm the deletion.

Searching for Users

To search for one or more users:

  1. In the Users pane, enter the search string in the Find field. You can perform a search using one or more of the following attributes:

    • Status

    • FamilyName

    • GivenName

    • MiddleName

    • Nickname

    • Email

    • Title

    • Office

    • Department

    • Company

    • Profession

    • Manager

    • Organization

    • TimeZone

    For more information, see Performing Simple Searches.

  2. Click the Search icon.

  3. Click x to reset the Users pane and repeat the search with a new string.

Alternatively, perform an advanced search by following the steps described in Performing Advanced Searches.

Managing Groups

An Oracle Beehive group is a defined collection of users or resources (or some combination thereof) that are related based on a line of business, a project, or another common association.

About Groups

Oracle Beehive provides the following group types:

  • Static groups have explicit member lists. You must manually add and remove members from static groups.

  • Dynamic groups have memberships defined by a query, so that users fitting whatever criteria is being queried are automatically made members. Dynamic group queries are based on any combination of user attributes, properties, or addresses.

    Example:

    All users with a particular manager could belong to a dynamic group defined by a query against the Manager attribute of user accounts. Whenever a user's manager attribute is changed to that particular manager, that user is automatically added to the group. Likewise, whenever a user's manager attribute changes (the user switches to a different manager), that user is automatically removed from the group.

Creating Static Groups

To create a static group:

  1. From the New pull-down menu, select Static Group. The New Static Group pop-up will open in a separate window.

  2. On the General tab, enter a unique name for the group. Optionally, enter a brief group description.

  3. Optionally, click the Contact Info tab and provide contact information for the group.

  4. Click the Members tab.

  5. Click +.

  6. Enter a name or part of a name in the Find field and click the search icon to return a list of results.

  7. Select a user from the list and click Add. Alternatively, hold down Ctrl to select multiple users, and click Add.

  8. Click Save & Close to create the static group.

Creating Dynamic Groups

To create a dynamic group:

  1. From the New pull-down menu, select Dynamic Group. The New Dynamic Group pop-up will open in a separate window.

  2. On the General tab, enter a unique name for the group. Optionally, enter a brief group description.

  3. In the Query section, select one or more attributes to define your membership, and provide a value and operator for each attribute you choose. You can add members using any of the following attributes:

    • Family name

    • Given name

    • Middle name

    • Nickname

    • E-mail address

    • Title

    • Office

    • Department

    • Company

    • Profession

    • Manager

    • Type (Enterprise or Extended Enterprise)

    Example:

    You create a dynamic group intended to comprise only the accountants in your Montreal office. From the Add pull-down menu, you select Office and click +. Leaving the operator at contains, you enter Montreal in the edit box. From the Add pull-down menu, you select Profession and click +. Leaving the operator at contains, you enter accountant in the edit box. You click the All radio button to ensure that your group only contains users who meet both your search criteria.
  4. Click Preview to verify that your query has generated the desired membership for this group.

  5. Optionally, click the Contact Info tab and provide contact information for the group.

  6. Optionally, you can manually add members to a dynamic group by performing the following steps:

    1. Click the Members tab.

    2. Click +.

    3. Enter a name or part of a name in the Find field and click the search icon to return a list of results.

    4. Select a user from the list and click Add. Alternatively, hold down Ctrl to select multiple users, and click Add.

  7. Optionally, you can make specific roles available to group members by performing the following steps:

    1. Click the Roles tab.

    2. Click Add.

    3. Leave the Find field blank and click the search icon to return a list of all available roles.

    4. Select a role from the list and click Add. Alternatively, hold down Ctrl to select multiple roles, and click Add.

  8. Click Save & Close to create the dynamic group.

Searching for Groups

To search for one or more groups:

  1. In the Groups pane, enter the search string in the Find field. You can perform a search using one or more of the following attributes:

    • Name

    • Description

    • Status

    For more information, see Performing Simple Searches.

  2. Click the Search icon.

  3. Click x to reset the Groups pane and repeat the search with a new string.

Alternatively, perform an advanced search by following the steps described in Performing Advanced Searches.

Managing Resources

A resource is an entity that users can search for, reserve, and use for a specified period of time, such as a conference room or a projector.

Creating Resources

To create a resource:

  1. Click New.

  2. Enter a unique name for the resource.

  3. Specify a capacity for the resource. For example, a small conference room could have a capacity of 10.

  4. Optionally, enter a location, description, phone number, fax number, and URL for the resource.

  5. Optionally, provide any special information related to booking this resource in the Booking Info field.

  6. Optionally, assign individual approvers to the resource by performing the following steps:

    1. Click +.

    2. Enter the full name or part of the name of an Oracle Beehive user in the field and click the magnifying glass to obtain a list of results.

    3. Select a user. The user now appears in the Approvers list.

    4. Select the check box next to the user name to make the user an approver for the resource.

    5. Repeat the previous steps to add additional users as approvers for the resource.

      Note:

      When you create a resource, all Oracle Beehive users are listed as approvers for the resource by default.
  7. Click Save & Close.

Searching for Resources

To search for one or more resources:

  1. In the Resources pane, enter the search string in the Find field. You can perform a search using one or more of the following attributes:

    • Name

    • ID

    • Capacity

    • Email

    • Type

    • Modified

    For more information, see Performing Simple Searches.

  2. Click Search.

  3. Click Clear to reset the Resources pane and repeat the search with a new string.

Alternatively, perform an advanced search by following the steps described in Performing Advanced Searches.

Managing Devices

Uploading Device Profiles

To upload a new device profile to Oracle Beehive:

  1. From the Actions menu, select Upload Profile.

  2. Click Browse.

  3. Select a valid device profile in XML format and click Open.

  4. Click Upload.

  5. Click Close to exit the Upload File dialog box.

Viewing, Modifying, and Deleting Device Profiles

To modify a device profile:

  1. From the Actions menu, select Open.

  2. Click + next to any of the sections.

  3. To modify a parameter, edit the value in the appropriate Value box.

  4. Click Apply to apply your changes, or Reset to erase your changes.

    Note:

    The device capabilities that appear when you click the Capabilities tab are read-only and cannot be modified.

To delete a device profile:

  1. Select a profile.

  2. From the Actions menu, select Delete.

    Note:

    You can only delete profiles without associated device types.

Filtering Profiles

You can filter the list of device profiles displayed in the main window by entering filter criteria in the Filter by field and clicking the magnifying glass. You can filter profiles by name or by the Modified On date. Clicking X next to the Filter by field resets the filter criteria and reloads the profile window with no filter criteria.

Viewing Device Types for a Profile

To view all associated device types for a profile:

  1. Select a profile.

  2. From the View menu, select Types.

Listing Devices Types

Click the Types tab to list all available device types in the system and display associated information for each device type:

  • Name

  • Manufacturer

  • Model

  • Dev Inf DTD Version: Displays the Document Type Definition (DTD) version used to exchange information between the device and the Oracle Beehive server.

  • Software Version: Lists the device's OS version.

  • Device Class: Lists the class of the device. Device classes include PDA, pager, and mobile.

  • OS: Lists the operating system that can run on the device.

  • Processor

Creating a Device Type

To create a device type:

  1. Click New to bring up the New Device Type window.

  2. Select a profile from the Device Profile pull-down menu.

  3. Enter a manufacturer, model, device class, OS, and processor for the device type. If you specify a manufacturer and model, you do not need to provide the device class, OS, and processor. If you provide the device class, OS, and processor, you do not need to specify the manufacturer and model.

  4. Optionally, enter the software version and DTD version for the device type. For more information, see Listing Devices Types.

  5. Click Save & Close to create the device type and close the New Device Type window. Alternatively, click Apply to create the device type without closing the window.

Viewing and Modifying Device Types

To view a device type, select it in the main window. Details are displayed in a pane below the main window.

To modify a device type:

  1. Click the Types tab.

  2. Select a device type.

  3. Modify any of the properties for the device type.

  4. Click Apply to save your changes to the device type. Alternatively, click Reset to discard your changes.

Deleting Device Types

To delete a device type, select one or more device types and select Delete from the Actions menu. You will be prompted to confirm the deletion or deletions.

Searching for Device Types

You can search the system for device types.

To search for device types:

  1. In the Devices pane, click the Types tab. For more information, see Listing Devices Types.

  2. Enter a search string in the Find field. For more information, see Performing Simple Searches.

  3. Click Search.

  4. Click Clear to reset the Devices pane and repeat the search with a new string.

Alternatively, perform an advanced search by following the steps described in Performing Advanced Searches.

Queuing Device Commands

You can queue different device commands to be performed at a later date.

To queue a command for a device:

  1. From the Manage Enterprises section in the left-hand pane, click Devices.

  2. Click the Devices tab.

  3. Click the Commands tab.

  4. Select the device.

  5. From the Actions menu, select one of the following commands:

    • Check for Updates: Use this command to query the server for any application updates.

    • Upload Log: Use this command to upload device logs created by the installed applications to the server.

    • Upload Config: Use this command to upload an inventory of all installed applications and their respective configurations to the server.

    • Wipeout: Use this command to erase all applications and data from the selected device.

Deleting Device Commands

You can delete device commands from the queue at any time. You may want to delete device commands for one of the following reasons:

  • The device is not available.

  • The user is not currently accepting the queued command.

  • You have queued another command with the Wipeout command pending and no longer want the command to be executed.

To delete a device command from the queue:

  1. From the Manage Enterprises section in the left-hand pane, click Devices.

  2. Click the Devices tab.

  3. Click the Commands tab.

  4. Select the device.

  5. Select the queued command and click Delete.

Listing Devices

To list all devices registered in Oracle Beehive:

  1. From the Manage Enterprises section in the left-hand pane, click Devices.

  2. Click the Devices tab. To view details for a device, select it. Information for the selected device appears in the details pane.

Managing Roles

A role is tied to a role definition and can be used to assign a set of privileges to multiple users. Though Oracle Beehive comes with a predefined set of roles and role definitions, you can create your own roles and role definitions to suit the needs of your enterprise.

Creating Role Definitions

A role definition is an Oracle Beehive entity that comprises access types and privileges for a given scope (enterprise, organization, team workspace, or personal workspace).

To create a role definition:

  1. From the Enterprises panel, click Roles.

  2. If the scope for the role definition is your entire enterprise, proceed to step 3. If the scope for the role definition is an organization, team workspace, or personal workspace within your enterprise, perform the following steps:

    1. Click the Search icon next to the Scope field.

    2. Click the View Organizations icon to view a list of organizations within your enterprise. Alternatively, click the View Workspaces icon to view a list of team workspaces and personal workspaces within your enterprise.

    3. Select an item from the list and click Add.

      Tip:

      A scope is a section of the Oracle Beehive system such as an enterprise, organization, personal workspace, or team workspace. When you create a role definition, you define its scope, which determines the availability and access of the role definition. For example, a role definition created within the scope of a specific team workspace is only valid in that workspace.
  3. Click the Definitions tab.

  4. From the New menu, select Definitions.

  5. In the Name field, enter a unique name for the role definition. In the Description field, enter a brief description for the role definition.

  6. Select the always enabled check box to ensure that all roles referencing this role definition are enabled by default. If the always enabled check box is deselected, roles referencing this role definition are disabled by default, and must be enabled individually.

  7. Using the options in the Access types section, select the operations that can be performed on Oracle Beehive entities in this role definition. You can grant access, deny access, or leave access undefined for each access type:

    • All sets every access type to Granted for the role definition.

    • Read allows the user to view or open an artifact.

    • Write allows the user to alter an artifact.

    • Delete allows the user to delete an artifact.

    • Execute allows the user to run executable artifacts, such as installers and applications.

    • Discover only allows the user to discover the existence of an artifact in searches, lists, and directories. It does not let the user view the contents of an artifact.

    Note:

    For more information, see About Entities, Actors, and Artifacts.
  8. Click the Privileges tab.

  9. Click Add.

  10. Select a privilege from the list and click Add. Alternatively, hold down Ctrl to select multiple privileges, and click Add.

    Tip:

    A privilege is the authority to perform a set of operations within the Oracle Beehive system. Some privileges apply only to specific services, while others apply to all services. For example, the Calendar User privilege allows the user to use the calendaring functionality in Oracle Beehive, while the Login privilege allows the user to sign in to Oracle Beehive.
  11. Click Save & Close to create the role definition and close the New Definition window. Alternatively, click Apply to create the role definition without closing the window.

Conceptualizing Role Definitions

When you decide to create a role definition, determine the needs you want fulfilled through the role definition in relation to your user base:

  1. Where in your enterprise is this role definition valid? A role definition can be valid in a team workspace, in a personal workspace, in an organization, or across your entire enterprise. The logical area of effect for this role definition constitutes its scope.

  2. What services should be available for this role definition? The type and number of accessible services constitute the privileges for the role definition.

  3. What operations can be performed on Oracle Beehive entities via this role definition? The selected operations constitute the available access types for the role definition.

Note:

A role definition remains inactive until you associate it with a role.

Creating Roles

To create a role:

  1. Click New.

  2. Enter a unique name for the role.

  3. Click the search icon to access a list of role definitions. Select a role definition from the list. The selected role definition now appears in the Definitions field.

  4. Optionally, enter a role description in the Description field.

  5. Optionally, you can grant users, groups, or resources automatic access to this role by performing the following steps:

    1. Depending on the type of entity to be granted access to the role, click the Groups tab, the Users tab, or the Resources tab.

    2. Click Add.

    3. Enter the full name or part of the name of a user, group, or resource in the Find field and click the magnifying glass to obtain a list of results.

    4. Select an item from the list and click Add. Alternatively, hold down Ctrl to select multiple items, and click Add.

  6. Click Save & Close.

Modifying Roles

To modify a role:

  1. Select the role.

  2. Modify the role as described in steps 2 through 5 of Creating Roles.

  3. Click Apply to save your changes.

Managing Categories

Categories are a hierarchical structure of designations that may be applied to entities, including all of the artifacts stored in a workspace. Categories always exist at the enterprise scope.

Managing Audit

Auditing is the act of capturing and evaluating historical records of system events to assess system performance, track user activities, and identify issues, among other goals. The results of effective auditing include timely and informed decisions and actions, especially when resolving security threats or preventing them from occurring. For more detailed information, see "Managing Auditing Policies" in the "Managing Oracle Beehive Events, Policies and Workflows" module of the Oracle Beehive Administrator's Guide.

To access the main Audit view, click Audit in the Enterprises panel.

Listing Audit Templates

You can list available audit templates by clicking the Templates tab in the main Audit view. Besides name and description, the following information is also provided:

  • Enabled: If the audit template is enabled, a checkmark appears next to the template name in the Enabled column.

    Note:

    A disabled audit template automatically disables all audit policies that reference it.
  • Auditable Events: A list of auditable event types captured by the audit template. If there are more event types associated with the template than the column can show, ... is appended to the end of the list. You can view the complete list by clicking the Auditable Events tab in the Details pane when the appropriate audit template is selected.

You can sort the list of audit templates by name or by description.

Creating Audit Templates

To create an audit template:

  1. From the main Audit view, click the Templates tab.

  2. From the New menu, select Audit Template.

  3. On the General tab, enter a unique name for the template. Additionally, enter a brief description of the template.

  4. Choose whether or not the template is enabled. For more information, see Listing Audit Templates.

  5. Click the Auditable Events tab.

  6. Select an auditable event to be captured by this audit template using the arrow buttons. Repeat the step if needed.

  7. Click Save & Close to create the audit template.

Modifying Audit Templates

You can modify the name, description, enabled status, and associated auditable events of any Oracle Beehive audit template.

To modify an audit template:

  1. From the main Audit view, click the Templates tab.

  2. Select the audit template you want to modify.

  3. From the Actions menu, select Open.

  4. When you have finished, click Save & Close to save your changes and return to the main Audit view.

Deleting Audit Templates

To delete an audit template:

  1. In the main Audit view, click the Templates tab.

  2. Select the audit template you want to delete.

  3. Click Delete.

  4. Click OK to confirm the operation and delete the selected audit template.

Listing Audit Policies

You can list available audit policies by clicking the Policies tab in the main Audit view. Besides name and description, the following information is also provided for each audit policy:

  • Enabled: If the audit policy is enabled, a checkmark appears next to the policy name in the Enabled column. A disabled audit policy is inactive.

  • Template: The audit template referenced by the selected policy.

  • Scope: The audit scope of the selected policy.

  • Actors: The users and/or groups whose events will be audited by this policy. If this field is empty, the selected audit policy will affect all users by default. For more information, see About Entities, Actors, and Artifacts.

Creating Audit Policies

Oracle Beehive comes with a predefined set of audit policies out of the box. However, you can also create your own audit policies from scratch or based on a specified audit template.

Creating an Audit Policy From Scratch

When you create an audit policy, you must assign it an audit template and a scope.

To create an audit policy from scratch:

  1. In the main Audit view, click the Policies tab.

  2. Click New.

  3. On the General tab, enter a unique name for the audit policy. Additionally, enter a brief description of the audit policy.

  4. Select an audit template and an audit scope for the policy. For more information, see Listing Audit Policies.

  5. Choose whether or not the audit policy is enabled. Disabled audit policies are inactive.

  6. Click the Users tab and select the users to be audited by this policy. Click the Groups tab and select the groups to be audited by this policy. For more information, see Listing Audit Policies.

  7. Click Save & Close to create your audit policy and exit the New Audit Policy dialog.

Creating an Audit Policy From an Audit Template

For convenience and ease of use, you can create an audit policy directly from an audit template.

To create an audit policy from a specific audit template:

  1. In the main Audit view, click the Templates tab.

  2. Select an audit template.

  3. From the New menu, select Audit Policy from Template.

  4. Enter all information for the policy as described in Creating an Audit Policy From Scratch.

Modifying Audit Policies

You can modify any audit policy you have created by double-clicking the audit policy in the main Audit view and following the steps described in Creating Audit Policies.

Deleting Audit Policies

You can delete any audit policy you have created by selecting the audit policy in the main Audit view and clicking Delete from the Toolbar. To delete multiple audit policies at once, hold down Ctrl while making your selections. You will be prompted to confirm the deletion or deletions.

Searching for Audit Template and Policies

You can search the system for audit templates or policies.

To search for audit templates or policies:

  1. If you want to search for audit templates, click the Templates tab. Alternatively, if you want to search for audit policies, click the Policies tab.

  2. Enter a search string in the Find field. For more information, see Performing Simple Searches.

  3. Click the Search button.

  4. Click the Clear button to reset the pane and repeat the search with a new string.

Alternatively, perform an advanced search by following the steps described in Performing Advanced Searches.

Searching the Audit Repository

The Audit Repository contains all audited events. Auditors can search the repository for specific records and create audit trails from the search results. For more information, see Creating Audit Trails.

To search the audit repository for records:

  1. In the main Audit view, click the Repository tab.

  2. Enter a search string in the Find field. For more information, see Performing Simple Searches. The following attributes are available for searching:

    Table 3-1 Audit Record Search Attributes

    Search Attribute Description

    actor

    The actor that caused the audited event(s)

    event

    The audit event type

    range

    The date range in which the audited event(s) occurred

    service

    The type of component used to cause the audited event, for example, calendar or email

    entityId

    The identifier of the entity on which the actor is performing the action

    activity

    The action performed by the actor


  3. Click the Search button. Your search results appear in the main window.

  4. Click the Clear button to reset the pane and repeat the search with a new string.

Alternatively, perform an advanced search by following the steps described in Performing Advanced Searches.

Listing Audit Records

When you click the Repository tab in the main Audit view, you will see a list of audit records. Clicking an audit record brings up information about the record in the Details pane. Because audit records cannot be modified, they appear as read-only in the display.

Listing Audit Trails

When you click the Trails tab in the main Audit view, you will see a list of audit trails. The attributes for each audit trail are listed in the appropriate column:

  • Name (name)

  • Description (description)

  • Last Record ID: Lists the sequence ID of the last audit record in the audit trail.

  • Record Count: Lists the number of records in the audit trail.

  • Host ID (host): Lists the host identifier of the Oracle Beehive server from where the audit trail is generated.

  • Instance Name (instance): Lists the instance identifier of the application server from where the audit trail is generated.

  • Oracle Home (oraclehome): Lists the <Oracle Home> property value from where the audit trail is generated.

    Note:

    Each parenthetical value represents the equivalent search attribute for the associated audit trail attribute. For more information, see Searching for Audit Trails and Performing Simple Searches.

Creating Audit Trails

There are different ways to create an audit trail:

Creating an Audit Trail From a Repository Search

You can search the repository for a set of records and add any or all of the search results to an audit trail. This approach is preferable when you want to create an audit trail based on a relatively small number of records and you have enough information to perform a well-defined search that does not return large numbers of irrelevant results.

To create an audit trail from a repository search:

  1. Determine the criteria for the audit records you want to add to your audit trail.

  2. Perform a search for audit records using the steps described in Searching the Audit Repository.

  3. Holding down Ctrl, select the desired audit records.

  4. From the Toolbar, click New.

  5. Enter a unique name for the audit trail. Optionally, enter a description.

  6. Optionally, click the Member Records tab and add additional audit records to the audit trail.

  7. Click Save & Close to create the audit trail and return to the main Audit view.

Creating an Audit Trail Using Filters

You can create an audit trail based on a specific set of filters. Only audit records that satisfy your filters will be added to the audit trail. This approach is preferable when you want to create an audit trail based on a large number of records.

To create an audit trail using filter conditions:

  1. In the main Audit view, click New on the Toolbar.

  2. Enter a unique name for the audit trail. Optionally, enter a description.

  3. Add filters to the audit trail:

    • Click the User Filter tab and add one or more users to the filter.

    • Click the Group Filter tab and add one or more groups to the filter.

    • Click the Entity Filter tab and add one or more entities to the filter.

  4. Click Apply to apply your filters to the audit trail.

  5. Click the Member Records tab to view all audit records in the audit trail that match your filter conditions. Optionally, you can manually add audit records to the audit trail.

  6. Click Save & Close to create the audit trail and return to the main Audit view.

    Note:

    To be included in the audit trail, an audit record must satisfy all specified filters.

Modifying Audit Trails

You can modify any audit trail you have created by double-clicking the audit trail in the main Audit view and following the steps described in Creating Audit Trails.

Deleting Audit Trails

You can delete any audit trail you have created by selecting the audit trail in the main Audit view and clicking Delete from the Toolbar. To delete multiple audit trails at once, hold down Ctrl while making your selections. You will be prompted to confirm the deletion or deletions.

Exporting Audit Trails

You can export an audit trail in XML format by selecting the audit trail in the main Audit view and clicking Export from the Toolbar. You will be prompted to provide a file name and a directory path for the export.

Validating Audit Trails

You can validate an audit trail to ensure that all its audit records are authentic and have not been compromised in any way.

To validate an audit trail:

  1. In the main Audit view, click the Trails tab.

  2. Select an audit trail and click Validate. You will be prompted to confirm the validation attempt.

If the validation is successful, a confirmation dialog will appear, indicating that the selected audit trail is valid and authentic.

If the validation is unsuccessful, an error dialog will appear, indicating that the selected audit trail is invalid and listing the audit records that caused the validation attempt to fail.

Searching for Audit Trails

You can search the system for audit trails.

To search the system for audit trails:

  1. In the main Audit view, click the Trails tab.

  2. Enter a search string in the Find field. For more information, see Performing Simple Searches.

  3. Click the Search button.

  4. Click the Clear button to reset the pane and repeat the search with a new string.

Alternatively, perform an advanced search by following the steps described in Performing Advanced Searches.