update_audit_settings

Updates the current audit settings in the repository and restarts the OMS. Only Enterprise Manager Super Administrators have permission to view the audited data.

Format

emcli update_audit_settings
      [-audit_switch="ENABLE|DISABLE"]
      [-operations_to_enable="name_of_operations_to_enable"]
      [-operations_to_disable="name_of_operations_to_disable"]
      [-externalization_switch="ENABLE|DISABLE"]
      [-directory="directory_name"]
      [-file_prefix="file_prefix"]
      [-file_size="file_size"]
      [-data_retention_period="data_retention_period"]

[ ]  indicates that the parameter is optional

Options

audit_switch

Audit switch to enable auditing across Enterprise Manager.
operations_to_enable

Enables auditing for specified operations. To enable all operations, specify ALL. this option is invalid if auditing is disabled.
operations_to_disable

Disables auditing for specified operations. To disable all operations, specify ALL. this option is invalid if auditing is disabled.
externalization_switch

Enable the audit data export service. The default value is DISABLE.
directory

Database directory that is configured with an OS directory where the export service archives the audit data files. This directory is required to externalize audit data in Enterprise Manager Cloud Control. The update_audit_settings verb assumes that this directory has already been created. The following example creates the database directory EMDIR from the directory /tmp/em_audit_data with read/write permissions for the SYSMAN user:
```
SQL>create directory EMDIR as '/tmp/em_audit_data'; 
Directory created. 
SQL>grant read,write on directory "EMDIR" to SYSMAN; 
Grant succeed. 
```
file_prefix

File prefix to be used by the export service to create the file name where audit data is to be written. The default value is em_audit.
file_size

Maximum value of each file size. The default value for this is 5000000 bytes.
data_retention_period

Maximum period the Enterprise Manager repository stores audit data. The default value is 365 days.

Examples

Example 1

This example enables all operations except LOGIN and LOGOUT:

emcli update_audit_settings
          -audit_switch="ENABLE"
          -operations_to_enable="ALL"
          -operations_to_disable="LOGIN;LOGOUT"

Example 2

This example enables Weblogic Server specific operations to be audited.

emcli update_audit_settings
     -operations_to_enable="WEBLOGIC_DOMAIN_UPDATE_INVOKE;WEBLOGIC_DOMAIN
     _LOGIN;WEB_LOGIC_DOMAIN_LOGOUT"