6 Configuring and Using Audit Record Repository

The Audit Record Repository (ARR), which includes an audit server and an audit repository, is part of the Internet Protocol Suite that deals with the transmission of data. Specifically related to Oracle Healthcare Master Person Index (OHMPI) and the IHE Profiles Application, ARR provides secure transmission and auditing for healthcare application systems. The major components of the ARR include:

Audit Trail and Node Authentication (ATNA) Integration Profile
- http://wiki.ihe.net/index.php?title=ATNA
which is built on top of the following:
Security Audit and Access Accountability Message XML Data Definitions for Healthcare Applications
- http://tools.ietf.org/html/rfc3881
The Syslog Protocol
- http://tools.ietf.org/html/rfc5424
Transmission of Syslog Messages over Transport Layer Security (TLS)
- http://tools.ietf.org/search/rfc5425
Transmission of Syslog Messages over User Datagram Protocol (UDP)
- https://tools.ietf.org/html/rfc5426
Note:
The preceding links open documents that deal with the Internet Protocol Suite, specifically Internet Official Protocol Standards (STD1) as related to ARR. They provide critical technical information about secure transmission of data over the internet, including node authentication and an audit trail. Oracle recommends that you read them.

This chapter includes the following sections:

Installing the Audit Record Repository
Running the Audit Record Repository Server
Configuring the Audit Client

Installing the Audit Record Repository

Running the Audit Record Repository Server

Configuring the Audit Client

In order for the IHE Profiles Application to send audit records to the Audit Record Repository Server, you have to properly configure an OHMPI audit client. The OHMPI audit client's configuration file is named by ohmpi-audit-client.properties. For the WebLogic application server, this property file is under domains\<domain_name>\lib.

There are two properties defined in ohmpi-audit-client.properties: auditHost and auditPort. They are the host name and port number of the ARR server, respectively. The default value for auditHost is localhost, and it needs to match wherever the ARR server is running. The default value for auditPort is 514, and it needs to match the value of arr.port defined in arr\bin\arr.properties.