8.8 Validating Auditing and Reports

The run-time event auditing configuration can be tested.

Before you begin:

  1. To validate an Authentication Event: Audit Console login success/failure as described here or any administrative event.

    See Table 8-2.

    1. Sign out of Oracle Access Management Console.

    2. Sign in to Oracle Access Management Console with invalid user (not Administrator) credentials.

    3. Sign in to Oracle Access Management Console using the proper Administrator credentials.

    4. Review Log File: Open the audit.log file and search for the last Administrative event entries:

      $DOMAIN_HOME/servers/$ADMINSERVER_NAME/logs/auditlogs/OAM/audit.log 
      
    5. Review Database Log:

      1. Perform the following tasks.

        See Setting Up the Audit Database Store.

      2. Generate an Authentication event as described in Step 1.

      3. Connect to the database and connecting to the database and reviews audit events under IAU_BASE table.

  2. To validate a Runtime Event: Audit Authorization success/failure as described here or any runtime event that is described as follows:

    See Table 8-3.

    1. In a browser window, enter the URL of a protected resource for which you are not authorized.

    2. Review Log File: Open the audit.log file and search for the last Administrative event entries:

      $DOMAIN_HOME/servers/$ADMINSERVER_NAME/logs/auditlogs/OAM/audit.log 
      
    3. Review Database Log:

      1. Perform the following tasks.

        See Setting Up the Audit Database Store.

      2. Generate and Authentication event as described in Step 1.

      3. Connect to the database and connecting to the database and reviews audit events under IAU_BASE table.

  3. To validate Audit Configuration Changes:

    See Also Adding, Viewing, or Editing Audit Settings.

    1. From the Oracle Access Management Console, System Configuration tab, Common Configuration, modify Maximum Directory Size (MB) and Maximum File Size (MB) parameters.

    2. Repeat Steps here to confirm auditing is working.

  4. To View Reports:

    1. Sign in to Oracle BI EE. For example:

      http://host:port/xmlpserver

      Here, host is the computer hosting Oracle BI Publisher; port is the listening port for BI Publisher; xmlpserver is the login page for BI Publisher.

    2. In Oracle BI Publisher Enterprise, locate the desired reports. For example:

      Click Shared Folders, the component that contains the report you would like to view and then select the desired report.

    3. Perform any analysis as desired, or edit your auditing configuration as needed.

      $MW_HOME/user_projects/domains/base_domain/servers/oam_server1/logs/ 
      auditlogs/OAM/
      
  5. Archive and manage audit logs according to your company policies.