SAP BusinessObjects 4.0 Auditor Configuration & Deployment End to End
Hi Readers,
This is one of the frequently asked question in our forum and most of the steps are already there in our forum. Since I got a chance to work with this, am sharing the step by step configuration of Audit reports with screen captures.
Introduction
BusinessObjects Enterprise Auditor provides you with a way to monitor and record key facts about your deployment. Auditor also allows you to better administer individual user accounts and reports by giving you more insight into what actions users are taking and which reports they are accessing. The information provided by the auditor answers the following queries.
- Who is using your Business Objects Enterprise system?
- Which objects they are accessing?
- Which groups within the company use our BusinessObjects Enterprise system the most?
And below are some of the auditable actions
- Track when Objects are created, deleted of modified
- Track when reports are opened, saved, refreshed, created, modified and deleted
- Job monitoring and failure
Auditor Configuration
In SAP BusinessObjects 4.0 auditing database schema was changed, improved. SAP BusinessObjects Business Intelligence 4.0 does not include auditing sample Universe and auditing sample reports with the installation.
Configuration in CMC
To configure Audit database in BI 4.0, you need to follow the steps below
- Login to CMC and click on Auditing from Manage.
- In the ADS database configuration select type of the database.
- Provide the credentials of the database and click on save.
4. You need to restart the Central management server (CMS) hence log off from CMC.
5. Open Central configuration manager (CCM) and restart the Server Intelligence Agent.
6. Wait for some time so that all the servers will come up because the Adaptive processing server should be running completely to enable auditing.
Auditor deployment package and contents
Compared to previous versions of BusinessObjects, Installation package will not come with a default Audit universe and reports. But SAP comes up with as- is sample to help administrators and report designers to develop custom auditing reports. This would be a starting point of the development of custom auditing universe and reports as per the requirement. Please refer http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/40711187-04e8-2d10-d190-851e20c7665a to know more.
The Audit Sample package contains:
a) Seven sample auditing .UNX universes one for each of the following database types:
b) Thirty-eight sample Crystal Reports referencing the universe.
Deployment and configuration of Audit Universe
To deploy Auditing universe please follow the steps:
- In SAP BusinessObjects 4.0 Information Design Tool create a new project and retrieve the sample auditing universe into it. This will result in a 3 objects appearing in your project: a connection, (.cnx or .cns), a data layer, (.dfx), and a business layer (.blx)
2. In Information Design Tool create a connection (.cnx or .cns) to your auditing data store (for SAP Business Objects 4.0. Then change the connection of the dfx to use the one you have created.
3. In Information Design Tool check integrity of the universe before re-publishing. Please ignore all cardinality and unlinked table warnings.
4. In Information Design Tool publish the modified universe to your SAP BusinessObjects Enterprise system. If you are using a .cnx, you will be prompted to create and switch to a secure, published .cns connection. You can publish your .cnx connection to your SAP BusinessObjects Enterprise repository to generate a secured .cns.
Deployment and configuration of Audit Reports
- In Crystal Reports Design for 4.0 open the sample auditing reports
2. Click the ‘Data’ menu and ‘Set Data Source Location’ to point the report to the auditing universe published in the previous step.
3. Publish the sample reports to the SAP Business Objects Enterprise
Audit reports are deployed in your BusinessObjects environment. You can now start using the deployed reports.
Hope this is interesting and useful. We will see BusinessObjects Monitoring in my next few blogs.
Related references :
BusinessObjects Administration – Audit reporting vs Metadata reporting
BusinessObjects Auditing – What is changed in BO 4.0?
BusinessObjects Auditing – Considerations & Enabling
BusinessObjects Administration – Extending capabilities of BI 4.x Audit reporting
Hi,
Its really good and helpful document.
Still I am not sure why I am not able to connect to auditing universe.
we are on bo 4.o sp4 p6 and 2011 crystal as client tool
First time trying to create crystal report based on sample report
Procedure what I followed:
1. copied audit sample file on my client desktop
2. launched crystal 2011
3. opened "User-most active " sample report
4. Selected "set data source location"
5. Selected "Universe" from replace option
6. provided system ID and password
7. selected audit universe
Now once I click on audit universe, I dont see universe itself.... But On same universe webi, explorer reports are working fine.
some one please help me out..
Thanks in advance...
Hi,
So you do not recommend crystal 2011..
Actually we dont have plan to install crystal enterprise, still could you let me know on what name I can find this software in sap market place?
Thanks
Hi,
Yes we did..I see it in BI..
As I mentioned above my client do not have any idea to install crystal enterprise on client machines.
If I launch crystal enterprise through BI, its asking me to install crystal enterprise client tool on local machine.
So only I am trying to avoid it. We already installed crystal 2011 on clients machines.
Really thanks for comments and suggestions
Hello Mani,
Thank you so much for sharing this document .. this is really nice document.
Regards,
Atul.
This was a helpful guide - but since I am running my CMS and AUDIT databases on Oracle...I also needed to follow the instructions in the thread below...
BusinessObjects 4.0 Oracle Audit Universe woes
http://bihappyblog.com/2012/08/28/businessobjects-4-0-oracle-audit-universe-woes/
Sample RPT ran OK from the Desktop version of "Crystal Reports for Enterprise 4.0" after I followed the instructions in Manikandan's posting - but it gave a "Conversion from UTF8 to charset failed : Encoding not loaded" error when SCHEDULE or VIEW from the CMC.
This was the Fix for that....
http://mysapbi.wordpress.com/2012/10/08/crystal-reports-conversion-from-utf8-to-charset-failed/
I have followed your steps but it gives me this error:You cannot publish the universe because it references an unsecured connection.
when I try to publish the universe.
Any idea to why?
Thanks!
What is the database you are connecting to...?
I had the same error when I was connecting to Audit Connection running on Oracle DB, had to follow the two steps that I added in the posts above.
SQl Server '08 R2.
What do you mean by Proper Owner? Context?
I have BOE140_Audit as Qualifier and dbo as Owner.
I changed BOE140_Audit to BOE120_Audit which is the schema that I want. Still doesn't work. I am also trying different Owners too.
Thanks!
Hello Thomas,
Your connection should be of .cnx type instead of .cns type. Then only you should be able to export the universe to repository.
Regards,
Mani
Hello,
I'm trying to set it up for BI 4.1 SP3, but when I try to use the secured connection (.cns), i get Unable to connect to the repository, even though I'm connected to it, otherwise I could not create the shortcut. Any advice on this?
Thanks!
Somehow if we run IDT as an administrator it works, so that you know if you see this issue in the future
Thanks
Manikandan:
What options/configuration needs to be setup within CMC Audit section in order to report off of BW roles to BOBJ users relationships?
Thanks!
Hello Mani;
I am also curious to know the audit that can be performed for BW functions. It would be great if you could share a blog for the same as well.
Thank you.
Hi, I have set up the audit universe and CR for Enterprise reports in a couple of places in the last two weeks, however both times they suffered from being unable to refresh reports that had date prompts.
The query compiled by CR for Ent was trying to send American (mm/dd/yyyy) date formats to the database instead of UK English ones (dd/mm/yyyy). Nothing I cold think of to change (the odbc connection regional settings, the language settings of the IDT and Crystal, the language settings of the SQL 2008 user) made any difference - are there some settings in CR for Enterprise iteself that will help?
thanks
Keith
I had a question about a BO Audit DB query but it was "rejected" by the moderator on main BI forum. Any idea where I can ask questions about the BO Audit DB on the forum?
I am not sure why your post got rejected. You can post your questions in BI Platform section.
Thanks Jawahar. Maybe you or someone else would know this question then:
I have a query below that gives me all of the Web Intelligence report view events in the BO 4.x Audit database. I am trying to figure out how to display the folder and universe associated with this report in the query. Any ideas?
Thanks,
Brett
SELECT *
FROM
ADS_EVENT_TYPE
INNER JOIN ADS_EVENT
ON ADS_EVENT.Event_Type_ID = ADS_EVENT_TYPE.Event_Type_ID
INNER JOIN ADS_OBJECT_TYPE_STR
ON ADS_EVENT.Object_Type_ID = ADS_OBJECT_TYPE_STR.Object_Type_ID
WHERE ADS_EVENT.Object_ID > ''
AND ADS_EVENT.Object_ID <> 'unknown'
AND ADS_OBJECT_TYPE_STR.Object_Type_Name = 'Web Intelligence'
AND ADS_EVENT_TYPE.Event_Type_ID = 1002
Hello Brett, were you able to display that information? Can you share it with us?
Hello Mani,
As usual, a great and informative blog.
I have one doubt though and would appreciate if you could please help me with the same.
Lets say I choose not to have an Audit DB at the time of installation of BI4.x system. After installation, can I add an Audit DB?
Thanks & Rgds,
Sree
Hi Sree,
Yes we can configure Audit DB after installation,this can be done at SIA leval.
Hi!
When Crystal is not used by a custommer, it's a pity to install and run Crystal servers & client just for auditing reports, isn't it ? 🙁
I open a new discussion to know if it is possible to get auditing sample reports in WebI format instead of Crystal format (like in previous versions of BO).
Regards,
Stéphane.
Hi Mani,
Can I monitor schedules and publications execution and who are email destinations, using Auditing universe ?
Thanks in advance,
Kishore BG
Hi Mani
Is this Audit configuration works for BI4.1 Sp1?. We are having BI4.1 SP1 and i have performed the above steps for Audit configuration. I am getting the following error when i map the universe in 'set database location'
Error
"The original query could not be mapped exactly to the new data source because some objects or metadata are missing in the new data source. Verify your new report's query and query filter, as well as any sub report links in your report"
Can you please help?
Thanks
Venkat
Hi Main:
I can't find BOEXI40-Audit-MSSQL.unx
Can you give me a hit?
Thanks
Sabrina
If you are in BI 4.1 SPX, you may no longer need .unx file. You can get it from the LCMBIAR file. refer here http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/40711187-04e8-2d10-d190-851e20c7665a
Hi mani
Our BASIS/NW admin is not aware of the Database port.
While creating odbc connection in client System it is asking Database port with logon credentials..
How to find that?
Regards
prem
Hello developer:
Can I get user description?
Regards,
Sabrina
Hi Mani,
I would like to find out the number of users accessing each webi report in a particular folder, reporting in the format: webi report name, no. of users accessed it in past 3 months. Can I find that using querybuilder and can you give me sample query to use?
I can find it the other way by finding out the webi reports recently accessed by each user by the following query:
SELECT SI_NAME, SI_RECENT_DOCUMENTS FROM CI_SYSTEMOBJECTS WHERE SI_KIND='USER'
I might get close to finding my answer if I can get SI_LAST_ACCESSED_TS>'2014.06.24.00.00.01', however I do not get any result if I add this in the statement above:
SELECT SI_NAME, SI_RECENT_DOCUMENTS FROM CI_SYSTEMOBJECTS WHERE SI_KIND='USER' AND SI_RECENT_DOCUMENTS.SI_LAST_ACCESSED_TS>'2014.06.24.00.00.01'
Any thoughts?
Hi is it possible to monitor the log-in activity done through iPhone .I am aware we can monitor the activity done thorough SAP Mobile BI app but for specific iPhone activities ?
Thank you very much for this blog Manikandhan. I have been looking for these details from long time. Finally your blog has provided me that.
Hi Mani,
Thanks for your blog. its really helped me to start my work on Audit universe. Is there any way I can bring the User Full Name into the report? At present we are able to view only UserName in ADS_EVENT table. Could you help me to find this .
Regards,
Maruthi
Really excellent article, thanks! Do you have any advice for ADS maintenance? I discovered auditing events were not being recorded because the ADS had reached the 10GB limit I had set. Ideally I would keep 'Delete events after...' set to 365 days, but I don't really want to increase the size of the DB much more.
Can you tell me, if Auditing is set to Default, what a good size for the ADS db would be? And also tell me if there specific things I could purge from the DB that would help in this case.
Thank you very much for your time! 🙂
Andrew
Thanks for your article. We recently upgraded to 4.1 sp4, but our system admin did not install the ADS. We have looked for documentation on how to add it at this point, but haven't found instructions anywhere. We've only found instructions on configuring it. Do you know of any instructions on installing it? This is not handled by the System Configuration Wizard.
Any suggestions would be appreciated!
Thanks!
Jamie
Jamie :
Usually the job of creating the "Empty" ADS database is the responsibility of your Database Administrators (DBAs).
They should be creating a "New" SCHEMA - and the UserAccount that you are using to configure the ADS in Manikandan's 1st screen-shot should have FULL (Create/Read/Write) Rights on that new database.
What database are you using for your CMS database..? The ADS database creation should be using a similar process from when you set that up.
Thanks for your quick response. Yes we are moving forward on this. Our database for the CMS is Oracle and the DBA will set up the empty schema in Oracle.
Hello
Hope someone can tell me I can still do this ...
In 3.1 we monitored the usage of objects inside the universes in order to clean up obsolete and un-used objects.
In 4.1 I cannot seem to find this. Has anyone succeeded in doing so or can it be confirmed whether or not this is actually possible ?
Thx
Henrik
Hello Manikandan,
We have got everything running..means have Audit database configured...there are many default report published by SAP but still our requirement is not fullfilled.
We want list of reports usage(ran by users) summary and detail in below format:
Summary:
Data Range as variable prompt.
Report name No of times it was run
Detail:
Summary
Reportname username of who ran this Timewhen users ran this report
Any idea how to achieve this?
regards
While reviewing the exiting crystal Report on Events, we found that Folder path is not populated unless it is LCM job execution. Is this how Audit captures data or we need to enable something else.
You need to refere the enhanced new version of Audit Universe and reports from here
Unlock the Auditing database with a new Universe and Web Intelligence Documents for BI4.1
Thanks for your comments as well.
Thanks
Mani
In order to see the folder path, you need to enable it on the CMC-Auditing.
If you go there under Set Event Details, you'll find "Folder Path Details" which is NOT enabled by default.
Thanks Daniel, let me check it.
Hi,
I would like to know if exists a query to get this data from audit database:
Best regards,
Oscar Alvarez
Hi Mani,
Is it possible to see the data in Audit Report related to Universe Connection details like Connection Name,Connection Modified By , Connection Modified Date/Time.If it's possible please let me know the table and object name or send me the query which can be execute in Query Builder.
Thanks in advance.
Hi everyone,
When I try to run a report I got this message:
The authentication provider associated with this logon session does not support inter-process Single Sign-On. Please contact your system administrator for details. : The authentication provider (secEnterprise) associated with this logon session does not support inter-process Single Sign-On.
What should be done to fix it?
These reports look like they would be very useful, but I am having an issue when I try to run an integrity check (I use Oracle 12):
Column STATE referenced in the table ADS_AUDITEE does not have the same data type as in the database table STATE .......
There are several of these errors. Does anyone have any suggestions?
If you are in BI 4.1 SP5 or higher you can try with the Audit reports here as they are in Webi format
Unlock the Auditing database with a new Universe and Web Intelligence Documents for BI4.1/BI4.2
Hi,
Its really good and helpful document.
Thanks
Bhavesh Samant
Hi,
Sorry but I couldn't figure out what do you mean by data source when setting the connection.
We are BO 4.0 SP5 , I could not find the related version of the Audit Reports or Universe or .lcmbiar respectively . Please share if you have a link or .lcmbiar file for the Audit Reports BOEXI4.0 SP5
Hi Ravi,
You may required to raise a case with SAP to get the relative downloads Specific to your BIP version. Please quote KBA https://launchpad.support.sap.com/#/notes/1586222
I would suggest you to go for a BIP upgrade to a latest stable version as the version you are using is pretty old. You can utilize the new enhanced Audit reports in WebI if so
https://blogs.sap.com/2015/07/15/unlock-the-auditing-database-with-a-new-universe-and-web-intelligence-documents-for-bi41/
Note : These downloads are missing in new SAP community.
Thanks
Mani
Thank you Mani for reply , I have already sent email to the SAP Team but no reply , hope I get some reply soon .
Hi Mani and All,
Thanks for the details and informative posts about Audit Reports.
I have a custom requirement of my client, Client would like to see about WebI Report Usage
Regards,
Sridhar
Hi!
Can user activity on dashboards can be captured in BO 4.0 SP 12?
Thanks
Veenu Arora
Hi All,
Can anyone help me in getting audit details of the reports like report name, date created/modified, last refreshed, user name etc.
Actually i never did auditing before.
I searched through many blogs and sites but couldn’t achieve it.
It will be great help for me.
We are using BOXI 3.1 environment
Thanks in Advance,
Regards,
Madhu
Admin guide explains all this in details. http://help.sap.com/businessobject/product_guides/boexir31SP3/en/xi31_sp3_bip_admin_en.pdf
Hi,
We have recently upgraded from BI 4.1SP5 to 4.2SP2. As a migration procedure UMT does not copy Audit DB conents. So, Can anyone help how we should copy contents of existing DB(Oracle 11) to newly created DB(Oracle 12).
P.S. We have auditing functional in New Environment only Audit data history has become an issue at the moment. TIA!
Regards,
Vikram.
Hi there,it will be work for SAP BusinessObjects 4.2 and crystal reports 2016?many thanks for any Help
The steps and the sample provided in this blog is pretty old and for BI 4.2 I would suggest you to take a look here and fully utilize thw WebI samples. The comments section in the below blog should should answer your queries.
https://blogs.sap.com/2015/07/15/unlock-the-auditing-database-with-a-new-universe-and-web-intelligence-documents-for-bi41/
Hi Elumalai,
I having below error when open the unx.
while trying to invoke the method com.businessobjects.mds.resource.archive.ContentType.toString() of a null object returned from com.businessobjects.mds.resource.archive.Archive$ArchiveManifest.getContentType()
Please help