View and Manage Archived Audit Data

You can view and archive data retrieval details, retrieve and return audit data to the archive as needed, and move an audit data retrieval to a different compartment.

Archive Data Retrieval Details

Oracle Data Safe provides the following details for each archive data retrieval:

• Retrieval name (editable) - Name created by the user who created the archived audit data retrieval
• Target database - Target database for which the archived audit data applies
• Archive data description (editable) - Description created by the user who retrieved the archived audit data
• Archive data OCID - Oracle Cloud Identifier for the archive data retrieval object in Oracle Cloud Infrastructure
• Compartment - Compartment in which the archived audit data was saved to for the month
• Retrieval period - Beginning and end dates of the retrieval period
• Expiry time - Date and time when the archived audit data needs to be returned to the archive
• Requested time - Date and time when the user requested the archived audit data
• Completed time - Date and time when the archived data was retrieved
• Records retrieved - Number of audit records retrieved from the archive

View Details for an Archive Data Retrieval

1. Under Security Center, click Activity Auditing.
2. Under Related Resources, click Archive Data Retrievals. The Archive Data Retrievals page is displayed.
3. In the table, locate the row for the retrieval for which you want to view details, and click the target database name.
   The Archive Data Retrieval Details page is displayed.
4. On the Archive Data Retrievals Details tab, view the information.
5. To view the work requests related to the archive data retrieval, scroll down the page and view the listings under Work Requests.
   • For each work request, you can view its status (for example, ACCEPTED), the date/time when the work request was accepted, and the date/time when the work request was finished.
   • Click a particular work request to view its log messages and error messages. Log messages are displayed by default. To view error messages, under Resources, click Error Messages.
   • (Optional) If there was a work request failure, notice the error message displayed at the top of the page.

Retrieve Audit Data from the Archive

This task brings archived audit data into the Oracle Data Safe online repository so that you can view the data in Activity Auditing reports. You can retain the data for one month and then you need to return it to the archive.

1. Under Security Center, click Activity Auditing.
2. Under Related Resources, click Archive Data Retrievals.
   The Archive Data Retrievals page is displayed. For each listing in the table, you can view the target database, retrieval name, retrieval period (begin and end date), number of audit records retrieved, date/time when the audit data was retrieved, and date/time when the retrieval period expires.
3. Click Retrieve Data.
   The Retrieve Archive Data page is displayed.
4. For Target Databases, one at a time, select the target databases for which you want to retrieve archive audit data.
5. For Display name for Archive Data, leave the default name as is or enter a name.
6. (Optional) For Description, enter a brief explanation.
   For example, you may want to state the reason for retrieving the archive data.
7. For Compartment, select the compartment to which you want to save the retrieved audit data.
8. For Start Month, click the box and select a start date for the audit data.
9. For End Month, click the box and select an end date for the audit data.
10. Click Retrieve.
    A new entry is added to the table on the Archive Data Retrievals page.

Return Audit Data to the Archive

Prior to the expiry of retrieved audit data, you can choose to drop the data from the online repository and return it to the archive. Oracle Data Safe deletes the retrieval resource and the audit data becomes unavailable in the reports.

1. Under Security Center, click Activity Auditing.
2. Under Related Resources, click Archive Data Retrievals.
   The Archive Data Retrievals page is displayed.
3. In the table, locate the row for the retrieval resource that you want to return to the archive.
   The Archive Data Retrieval Details page is displayed.
4. Click Release.
   The Release Data to Archive dialog box is displayed asking you to confirm that you want to delete the audit archive retrieval resource.
5. Click Release Data to Archive.
   The retrieval resource is removed from the table on the Archive Data Retrievals page. The audit data is returned to the archive and can be retrieved again if needed.

Move an Archive Data Retrieval

1. Under Security Center, click Activity Auditing.
2. Under Related Resources, click Archive Data Retrievals.
   The Archive Data Retrievals page is displayed.
3. In the table, locate the row for the retrieval resource that you want to move, and click the target database name.
   The Archive Data Retrieval Details page is displayed.
4. Click Move Resource.
   The Move Resource to a Different Compartment dialog box is displayed.
5. From the drop-down list, select a different compartment.
6. Click Move Resource.
   The retrieval resource is moved immediately.