1. Presented by [Harshit Agrawal] 04/03/2017
Audit Logs
Presented by [Harshit Agrawal]
04/03/2017

2. Agenda:
What is Audit Log
Steps required to configure

3. Audit Logs:
1- Use audit logs to monitor user actions in Data Archive. 2- You can configure, archive, view, and purge audit logs. 3- When you configure audit logs, you configure information such as audit level, retention period, and details of the Data Vault host to which you want to archive audit logs.

4. Viewing the Audit Information:

5. Type of Audits: None -Disable audit logs. Audit Data Deletion
-Apply or remove legal holds.
-Update expiration dates for archived records.
-Delete and purge expired archived records.
Audit Metadata Modifications
-Add, edit, or remove tags from archived records.
-View, create, edit, or delete Data Vault access roles.
-Assign or delete Data Vault access role assignments to entities.
-View or edit retention policies.
-View, create, edit, or delete security groups.
-View, create, or edit users.
-Run a job.
-Delete a data visualization report.
-All Audit Data Deletion audit level actions.
Audit Data Access
-Log in to and out of Data Archive.
-Open the application view or the technical view from the Data Vault search results.
-Run a browse catalog search in Data Discovery.
-Run a browse data search in Data Discovery.
-Run a Data Vault search in Data Discovery.
-Enter search criteria in Search Data Vault in Data Discovery.
-View records and primary keys in the Search Data Vault search results.
-View, create, or edit Data Discovery search options.
-Create, edit, move, copy, or run a data visualization report.
-All Audit Metadata Modifications audit level actions

6. Configuring Audit Logs
Click Administration > Audit Logs.
2.Click Settings.
The Configuration tab appears.
3.From the Audit Level list, select an audit level.
4.To retain audit logs for a certain time period, enter the Retention period in months or years.
Note: When you choose indefinite retention, you do not need to schedule a purge job.
5.Enter a valid path for the Staging Directory.
6.Enter a valid path for the Data Vault Data Directory.
7.Enter the IP address of the Data Vault Host.
8.Enter the port number of the Data Vault host.
9.Enter the administration port number of the Data Vault host.
10.Enter the user name and password for the Data Vault host.
11.Enter the name of the Data Vault Folder.
12.Click Save.

7. Archiving Audit Logs
After you complete the configuration, schedule an audit log archive. When you schedule the audit log archive, Data Archive creates audit logs in the AM_AUDIT_HEADER and AM_AUDIT_DETAIL database tables. Then, Data Archive runs the Audit Log Archive Loader job to move the audit logs from the database tables to the Data Vault. After you schedule the audit log archive, you can view the audit log content.
Optionally, you can choose to receive alerts when the archive job is complete, terminated, or exits with an error.
1.Click Administration > Audit Logs.
2.On the Settings tab, click Archive Schedule.
3. Select how often you want to run the archive job.
4.Optionally, choose Completed, Terminated, or Error notifications. Then, enter the address where you want to receive alerts about the archive job.
5.Click Schedule Archive to schedule the audit log archive.

8. Archiving Audit Logs
After you complete the configuration, schedule an audit log archive. When you schedule the audit log archive, Data Archive creates audit logs in the AM_AUDIT_HEADER and AM_AUDIT_DETAIL database tables. Then, Data Archive runs the Audit Log Archive Loader job to move the audit logs from the database tables to the Data Vault. After you schedule the audit log archive, you can view the audit log content.
Optionally, you can choose to receive alerts when the archive job is complete, terminated, or exits with an error.
1.Click Administration > Audit Logs.
2.On the Settings tab, click Archive Schedule.
3. Select how often you want to run the archive job.
4.Optionally, choose Completed, Terminated, or Error notifications. Then, enter the address where you want to receive alerts about the archive job.
5.Click Schedule Archive to schedule the audit log archive.

9. Exporting Audit Logs
When you view audit logs, you can export all the audit logs. When you export the logs, you are prompted to schedule a standalone job. Then, you can access the file when you monitor the job status. You can export the data to PDF, XML, or CSV.
.Click Administration > Audit Log.
.Click Export All.
.Click Fetch Data.
.Specify a time for the job to run, and click Schedule..
Access Jobs > Monitor Jobs.
The Monitor Jobs screen appears if you schedule the job to run immediately.
Expand the Export All Records job.
Click View Exported Data.

10. Purging Audit Logs
To keep the audit logs from growing in size in the Data Vault, schedule a purge job. The purge job runs periodically to purge expired audit logs from the Data Vault. Optionally, you can choose to receive alerts when the purge job is complete, terminated, or exits with an error.
1. In the Settings tab, click Purge Schedule.
The Purge Schedule page appears.
2. From the list, select how often you want to run the purge job.
3. Optionally, choose Completed, Terminated, or Error notifications then enter the address where you want to receive alerts about the purge job.
The purge job deletes all the expired audit logs from the Data Vault.
4. Click Schedule Purge to save the settings.

11. DEMO

12. Any kind of feedback we would like to hear from you:

13. Thank You