Skip to Content
Author's profile photo Manikandan Elumalai

SAP BusinessObjects 4.0 Auditor Configuration & Deployment End to End

Hi Readers,

This is one of the frequently asked question in our forum and most of the steps are already there in our forum. Since I got a chance to work with this, am sharing the step by step configuration of Audit reports with screen captures.

Introduction

BusinessObjects Enterprise Auditor provides you with a way to monitor and record key facts about your deployment. Auditor also allows you to better administer individual user accounts and reports by giving you more insight into what actions users are taking and which reports they are accessing. The information provided by the auditor answers the following queries.

  1. Who is using your Business Objects Enterprise system?
  2. Which objects they are accessing?
  3. Which groups within the company use our BusinessObjects Enterprise system the most?

    

And below are some of the auditable actions


  • Track when Objects are created, deleted of modified
  • Track when reports are opened, saved, refreshed, created, modified and deleted
  • Job monitoring and failure

Auditor Configuration

In SAP BusinessObjects 4.0 auditing database schema was changed, improved. SAP BusinessObjects Business Intelligence 4.0 does not include auditing sample Universe and auditing sample reports with the installation.

Configuration in CMC

To configure Audit database in BI 4.0, you need to follow the steps below


  1. Login to CMC and click on Auditing from Manage.
  2. In the ADS database configuration select type of the database.
  3. Provide the credentials of the database and click on save.

/wp-content/uploads/2013/01/1_171929.jpg

     4. You need to restart the Central management server (CMS) hence log off from CMC.

     5. Open Central configuration manager (CCM) and restart the Server Intelligence Agent.

     6. Wait for some time so that all the servers will come up because the Adaptive processing server should be running completely to enable auditing.


Auditor deployment package and contents

Compared to previous versions of BusinessObjects, Installation package will not come with a default Audit universe and reports. But SAP comes up with as- is sample to help administrators and report designers to develop custom auditing reports. This would be a starting point of the development of custom auditing universe and reports as per the requirement. Please refer http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/40711187-04e8-2d10-d190-851e20c7665a to know more.

The Audit Sample package contains:

     a) Seven sample auditing .UNX universes one for each of the following database types:

     b) Thirty-eight sample Crystal Reports referencing the universe.

Deployment and configuration of Audit Universe

To deploy Auditing universe please follow the steps:

  1. In SAP BusinessObjects 4.0 Information Design Tool create a new project and retrieve the sample auditing universe into it. This will result in a 3 objects appearing in your project: a connection, (.cnx or .cns), a data layer, (.dfx), and a business layer (.blx)

/wp-content/uploads/2013/01/2_171931.jpg

/wp-content/uploads/2013/01/3_171935.jpg

2. In Information Design Tool create a connection (.cnx or .cns) to your auditing data store (for SAP Business Objects 4.0. Then change the connection of the dfx to use the one you have created.

/wp-content/uploads/2013/01/4_171937.jpg

/wp-content/uploads/2013/01/5_171938.jpg

3. In Information Design Tool check integrity of the universe before re-publishing. Please ignore all cardinality and unlinked table warnings.

/wp-content/uploads/2013/01/6_171939.jpg

4. In Information Design Tool publish the modified universe to your SAP BusinessObjects Enterprise system.  If you are using a .cnx, you will be prompted to create and switch to a secure, published .cns connection. You can publish your .cnx connection to your SAP BusinessObjects Enterprise repository to generate a secured .cns.

Deployment and configuration of Audit Reports


  1. In Crystal Reports Design for 4.0 open the sample auditing reports

/wp-content/uploads/2013/01/7_171940.jpg

2. Click the ‘Data’ menu and ‘Set Data Source Location’ to point the report to the auditing universe published in the previous step.

/wp-content/uploads/2013/01/8_171944.jpg

3. Publish the sample reports to the SAP Business Objects Enterprise

/wp-content/uploads/2013/01/9_171945.jpg

/wp-content/uploads/2013/01/10_171946.jpg

/wp-content/uploads/2013/01/11_171947.jpg

Audit reports are deployed in your BusinessObjects environment. You can now start using the deployed reports.

Hope this is interesting and useful. We will see BusinessObjects Monitoring in my next few blogs.

Related references :


BusinessObjects Administration – Audit reporting vs Metadata reporting

BusinessObjects Auditing – What is changed in BO 4.0?

BusinessObjects Auditing – Considerations & Enabling

BusinessObjects Administration – Extending capabilities of BI 4.x Audit reporting

Assigned Tags

      63 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo S man
      S man

      Hi,

      Its really good and helpful document.

      Still I am not sure why I am not able to connect to auditing universe.

      we are on bo 4.o sp4 p6 and 2011 crystal as client tool

      First time trying to create crystal report based on sample report

      Procedure what I followed:

      1. copied audit sample file on my client desktop

      2. launched crystal 2011

      3. opened "User-most active " sample report

      4. Selected "set data source location"

      5. Selected "Universe" from replace option

      6. provided system ID and password

      7. selected audit universe

      Now once I click on audit universe, I dont see universe itself.... But On same universe webi, explorer reports are working fine.

      some one please help me out..

      Thanks in advance...

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author
      Hello SJ, Please note Crystal 2011 uses 32 bit connection contrary to 64 bit connection used by others such as WebI and explorer. Instead I would suggest you to try with Crystal Enterprise.  Regards Mani
      Author's profile photo S man
      S man

      Hi,

      So you do not recommend crystal 2011..

      Actually we dont have plan to install crystal enterprise, still could you let me know on what name I can find this software in sap market place?

      Thanks

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author
      Have you did the BI4 complete install. CE comes with BI4 installation bundle.
      Author's profile photo S man
      S man

      Hi,

      Yes we did..I see it in BI..

      As I mentioned above my client do not have any idea to install crystal enterprise on client machines.

      If I launch crystal enterprise through BI, its asking me to install crystal enterprise client tool on local machine.

      So only I am trying to avoid it. We already installed crystal 2011 on clients machines.

      Really thanks for comments and suggestions

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author
      I suggested you to use the CE installed in BOE server instead of client side installation. since Audit reports export is going to be a one time activity, I followed this way
      Author's profile photo Atul Divekar
      Atul Divekar

      Hello Mani,

      Thank you so much for sharing this document .. this is really nice document.

      Regards,

      Atul.

      Author's profile photo Mark Richardson
      Mark Richardson

      This was a helpful guide - but since I am running my CMS and AUDIT databases on Oracle...I also needed to follow the instructions in the thread below...

      BusinessObjects 4.0 Oracle Audit Universe woes

      http://bihappyblog.com/2012/08/28/businessobjects-4-0-oracle-audit-universe-woes/

      Author's profile photo Mark Richardson
      Mark Richardson

      Sample RPT ran OK from the Desktop version of "Crystal Reports for Enterprise 4.0" after I followed the instructions in Manikandan's posting - but it gave a "Conversion from UTF8 to charset failed : Encoding not loaded" error when SCHEDULE or VIEW from the CMC.

       

      This was the Fix for that....

      http://mysapbi.wordpress.com/2012/10/08/crystal-reports-conversion-from-utf8-to-charset-failed/

      Author's profile photo Former Member
      Former Member

      I have followed your steps but it gives me this error:You cannot publish the universe because it references an unsecured connection.

      when I try to publish the universe.

      Any idea to why?

      Thanks!

      Author's profile photo Mark Richardson
      Mark Richardson

      What is the database you are connecting to...?

      I had the same error when I was connecting to Audit Connection running on Oracle DB, had to follow the two steps that I added in the posts above.

      Author's profile photo Former Member
      Former Member

      SQl Server '08 R2.

      What do you mean by Proper Owner? Context?

      I have BOE140_Audit as Qualifier and dbo as Owner.

      I changed BOE140_Audit to BOE120_Audit which is the schema that I want. Still doesn't work. I am also trying different Owners too.

      Thanks!

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author

      Hello Thomas,

      Your connection should be of .cnx type instead of .cns type. Then  only you should be able to export the universe to repository.

      Regards,

      Mani

      Author's profile photo Former Member
      Former Member

      Hello,

      I'm trying to set it up for BI 4.1 SP3, but when I try to use the secured connection (.cns), i get Unable to connect to the repository, even though I'm connected to it, otherwise I could not create the shortcut. Any advice on this?

      Thanks!

      Author's profile photo Former Member
      Former Member

      Somehow if we run IDT as an administrator it works, so that you know if you see this issue in the future

      Thanks

      Author's profile photo Former Member
      Former Member

      Manikandan:

      What options/configuration needs to be setup within CMC Audit section in order to report off of BW roles to BOBJ users relationships?

      Thanks!

      Author's profile photo Former Member
      Former Member

      Hello Mani;

      I am also curious to know the audit that can be performed for BW functions. It would be great if you could share a blog for the same as well.

      Thank you.

      Author's profile photo Former Member
      Former Member

      Hi, I have set up the audit universe and CR for Enterprise reports in a couple of places in the last two weeks, however both times they suffered from being unable to refresh reports that had date prompts.

      The query compiled by CR for Ent was trying to send American (mm/dd/yyyy) date formats to the database instead of UK English ones (dd/mm/yyyy). Nothing I cold think of to change (the odbc connection regional settings, the language settings of the IDT and Crystal, the language settings of the SQL 2008 user) made any difference - are there some settings in CR for Enterprise iteself that will help?

      thanks

      Keith

      Author's profile photo Former Member
      Former Member

      I had a question about a BO Audit DB query but it was "rejected" by the moderator on main BI forum.  Any idea where I can ask questions about the BO Audit DB on the forum?

      Author's profile photo Former Member
      Former Member

      I am not sure why your post got rejected. You can post your questions in BI Platform section.

      Author's profile photo Former Member
      Former Member

      Thanks Jawahar.  Maybe you or someone else would know this question then:

      I have a query below that gives me all of the Web Intelligence report view events in the BO 4.x Audit database.  I am trying to figure out how to display the folder and universe associated with this report in the query.  Any ideas?

      Thanks,

      Brett

      SELECT *

      FROM

         ADS_EVENT_TYPE

         INNER JOIN ADS_EVENT

          ON ADS_EVENT.Event_Type_ID = ADS_EVENT_TYPE.Event_Type_ID

         INNER JOIN  ADS_OBJECT_TYPE_STR

          ON ADS_EVENT.Object_Type_ID = ADS_OBJECT_TYPE_STR.Object_Type_ID

      WHERE ADS_EVENT.Object_ID  >  ''

      AND  ADS_EVENT.Object_ID  <>  'unknown'

      AND ADS_OBJECT_TYPE_STR.Object_Type_Name  = 'Web Intelligence'

      AND ADS_EVENT_TYPE.Event_Type_ID = 1002

      Author's profile photo Former Member
      Former Member

      Hello Brett, were you able to display that information? Can you share it with us?

      Author's profile photo Former Member
      Former Member

      Hello Mani,

      As usual, a great and informative blog.

      I have one doubt though and would appreciate if you could please help me with the same.

      Lets say I choose not to have an Audit DB at the time of installation of BI4.x system. After installation, can I add an Audit DB?

      Thanks & Rgds,

      Sree

      Author's profile photo Former Member
      Former Member

      Hi Sree,

      Yes we can configure Audit DB after installation,this can be done at SIA leval.

      Author's profile photo Former Member
      Former Member

      Hi!

      When Crystal is not used by a custommer, it's a pity to install and run Crystal servers & client just for auditing reports, isn't it ? 🙁

      I open a new discussion to know if it is possible to get auditing sample reports in WebI format instead of Crystal format (like in previous versions of BO).

      BI 4.1 auditing sample reports in WebI format ?

      Regards,

      Stéphane.

      Author's profile photo Former Member
      Former Member

      Hi Mani,

      Can I monitor schedules and publications execution and who are email destinations, using Auditing universe ?


      Thanks in advance,

      Kishore BG

      Author's profile photo Former Member
      Former Member

      Hi Mani

                    Is this Audit configuration works for BI4.1 Sp1?. We are having BI4.1 SP1 and i have performed the above steps for Audit configuration. I am getting the following error when i map the universe in 'set database location'

      Error

      "The original query could not be mapped exactly to the new data source because some objects or metadata are missing in the new data source. Verify your new report's query and query filter, as well as any sub report links in your report"

      Can you please help?

      Thanks

      Venkat

      Author's profile photo Former Member
      Former Member

      Hi Main:

      I can't find BOEXI40-Audit-MSSQL.unx
      Can you give me a hit?

      Thanks

      Sabrina

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author

      If you are in BI 4.1 SPX, you may no longer need .unx file. You can get it from the LCMBIAR file. refer here http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/40711187-04e8-2d10-d190-851e20c7665a

      Author's profile photo Former Member
      Former Member

      Hi mani

      Our BASIS/NW admin is not aware of the Database port.

      While creating odbc connection in  client System it is asking Database port with logon credentials..

      How to find that?

      Regards

      prem

      Author's profile photo Former Member
      Former Member

      Hello developer:

      Can I get user description?

      Regards,

      Sabrina

      Author's profile photo Former Member
      Former Member

      Hi Mani,

      I would like to find out the number of users accessing each webi report in a particular folder, reporting in the format: webi report name, no. of users accessed it in past 3 months. Can I find that using querybuilder and can you give me sample query to use?

      I can find it the other way by finding out the webi reports recently accessed by each user by the following query:

      SELECT SI_NAME, SI_RECENT_DOCUMENTS FROM CI_SYSTEMOBJECTS WHERE SI_KIND='USER'

      I might get close to finding my answer if I can get SI_LAST_ACCESSED_TS>'2014.06.24.00.00.01', however I do not get any result if I add this in the statement above:

      SELECT SI_NAME, SI_RECENT_DOCUMENTS FROM CI_SYSTEMOBJECTS WHERE SI_KIND='USER' AND SI_RECENT_DOCUMENTS.SI_LAST_ACCESSED_TS>'2014.06.24.00.00.01'

      Any thoughts?

      Author's profile photo Hari Sagar Pacca
      Hari Sagar Pacca

      Hi is it possible to monitor the log-in activity done through iPhone .I am aware we can monitor the activity done thorough SAP Mobile BI app but for specific iPhone activities ?

      Author's profile photo demudubabu S
      demudubabu S

      Thank you very much for this blog Manikandhan. I have been looking for these details from long time. Finally your blog has provided me that.

      Author's profile photo Former Member
      Former Member

      Hi Mani,

        Thanks for your blog. its really helped me to start my work on Audit universe. Is there any way I can bring the User Full Name into the report? At present we are able to view only UserName in ADS_EVENT table. Could you help me to find this .

      Regards,

      Maruthi

      Author's profile photo Andrew McFarlane
      Andrew McFarlane

      Really excellent article, thanks! Do you have any advice for ADS maintenance? I discovered auditing events were not being recorded because the ADS had reached the 10GB limit I had set. Ideally I would keep 'Delete events after...' set to 365 days, but I don't really want to increase the size of the DB much more.

      Can you tell me, if Auditing is set to Default, what a good size for the ADS db would be? And also tell me if there specific things I could purge from the DB that would help in this case.

      Thank you very much for your time! 🙂

      Andrew

      Author's profile photo Former Member
      Former Member

      Thanks for your article. We recently upgraded to 4.1 sp4, but our system admin did not install the ADS. We have looked for documentation on how to add it at this point, but haven't found instructions anywhere. We've only found instructions on configuring it. Do you know of any instructions on installing it? This is not handled by the System Configuration Wizard.

      Any suggestions would be appreciated!

      Thanks!

      Jamie

      Author's profile photo Mark Richardson
      Mark Richardson

      Jamie :

      Usually the job of creating the "Empty" ADS database is the responsibility of your Database Administrators (DBAs).

      They should be creating a "New" SCHEMA - and the UserAccount that you are using to configure the ADS in Manikandan's 1st screen-shot should have FULL (Create/Read/Write) Rights on that new database.

      What database are you using for your CMS database..? The ADS database creation should be using a similar process from when you set that up.

      Author's profile photo Former Member
      Former Member

      Thanks for your quick response. Yes we are moving forward on this. Our database for the CMS is Oracle and the DBA will set up the empty schema in Oracle.

      Author's profile photo Former Member
      Former Member

      Hello

      Hope someone can tell me I can still do this ...

      In 3.1 we monitored the usage of objects inside the universes in order to clean up obsolete and un-used objects.

      In 4.1 I cannot seem to find this. Has anyone succeeded in doing so or can it be confirmed whether or not this is actually possible ?

      Thx

      Henrik

      Author's profile photo Former Member
      Former Member

      Hello Manikandan,

      We have got everything running..means have Audit database configured...there are many default report published by SAP but still our requirement is not fullfilled.

      We want list of reports usage(ran by users) summary and detail in below format:

      Summary:

      Data Range as variable prompt.

      Report name    No of times it was run

      Detail:

      Summary

      Reportname  username of who ran this   Timewhen users ran this report

      Any idea how to achieve this?

      regards

      Author's profile photo Former Member
      Former Member

      While reviewing the exiting crystal Report on Events, we found that Folder path is not populated unless it is LCM job execution. Is this how Audit captures data or we need to enable something else.

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author

      You need to refere the enhanced new version of Audit Universe and reports from here

      Unlock the Auditing database with a new Universe and Web Intelligence Documents for BI4.1

      Thanks for your comments as well.

      Thanks

      Mani

      Author's profile photo Former Member
      Former Member

      In order to see the folder path, you need to enable it on the CMC-Auditing.

      If you go there under Set Event Details, you'll find "Folder Path Details" which is NOT enabled by default.

      Author's profile photo Former Member
      Former Member

      Thanks Daniel, let me check it.

      Author's profile photo Former Member
      Former Member

      Hi,

      I would like to know if exists a query to get this data from audit database:

      • Username
      • IP Address
      • Date and Time
      • Report or object

      Best regards,

      Oscar Alvarez

      Author's profile photo Former Member
      Former Member

      Hi Mani,

      Is it possible to see the data in Audit Report  related to Universe Connection details like Connection Name,Connection Modified By , Connection Modified Date/Time.If it's possible please let me know the table and object name or send me the query which can be execute in Query Builder.

      Thanks in advance.

      Author's profile photo Former Member
      Former Member

      Hi everyone,

      When I try to run a report I got this message:

      The authentication provider associated with this logon session does not support inter-process Single Sign-On. Please contact your system administrator for details. : The authentication provider (secEnterprise) associated with this logon session does not support inter-process Single Sign-On.

      What should be done to fix it?

      Author's profile photo Former Member
      Former Member

      These reports look like they would be very useful, but I am having an issue when I try to run an integrity check (I use Oracle 12):

      Column STATE referenced in the table ADS_AUDITEE does not have the same data type as in the database table STATE .......

      There are several of these errors.  Does anyone have any suggestions?

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author

      If you are in BI 4.1 SP5 or higher you can try with the Audit reports here as they are in Webi format

      Unlock the Auditing database with a new Universe and Web Intelligence Documents for BI4.1/BI4.2

      Author's profile photo Former Member
      Former Member

      Hi,

      Its really good and helpful document.

      Thanks

      Bhavesh Samant

      Author's profile photo N .
      N .

      Hi,

      Sorry but I couldn't figure out what do you mean by data source when setting the connection.

      Author's profile photo Ravishanker Maduri
      Ravishanker Maduri

      We are BO 4.0 SP5 , I could not find the related version of the Audit Reports or Universe or .lcmbiar respectively . Please share if you have a link or .lcmbiar file for the Audit Reports BOEXI4.0 SP5

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author

      Hi Ravi,

      You may required to raise a case with SAP to get the relative downloads Specific to your BIP version. Please quote KBA https://launchpad.support.sap.com/#/notes/1586222

      I would suggest you to go for a BIP upgrade to a latest stable version as the version you are using is pretty old. You can utilize the new enhanced  Audit reports in WebI if so

      https://blogs.sap.com/2015/07/15/unlock-the-auditing-database-with-a-new-universe-and-web-intelligence-documents-for-bi41/

      Note : These downloads are missing in new SAP community.

      Thanks
      Mani

      Author's profile photo Ravishanker Maduri
      Ravishanker Maduri

      Thank you Mani for reply , I have already sent email to the SAP Team but no reply , hope I get some reply soon .

      Author's profile photo Former Member
      Former Member

      Hi Mani and All,

       

      Thanks for the details and informative posts about Audit Reports.

       

      I have a custom requirement of my client, Client would like to see about WebI Report Usage

      1. "No of time each WebI Report executed over a period of time" means user want to see the no of time report run in a give period. And folder information of the report as well. I am using BI4 Audit Uinverse imported using LCMBIAR file and Reports as well

       

      Regards,

      Sridhar

      Author's profile photo Veenu Arora
      Veenu Arora

      Hi!

       

      Can user activity on dashboards can be captured in BO 4.0 SP 12?

       

      Thanks

      Veenu Arora

      Author's profile photo Former Member
      Former Member

      Hi All,

      Can anyone help me in getting audit details of the reports like report name, date created/modified, last refreshed, user name etc.

      Actually i never did auditing before.

      I searched through many blogs and sites but couldn’t achieve it.

      It will be great help for me.

       

      We are using BOXI 3.1 environment

       

      Thanks in Advance,

      Regards,

      Madhu

      Author's profile photo Denis Konovalov
      Denis Konovalov

      Admin guide explains all this in details. http://help.sap.com/businessobject/product_guides/boexir31SP3/en/xi31_sp3_bip_admin_en.pdf

      Author's profile photo AOSCPS User
      AOSCPS User

      Hi,

      We have recently upgraded from BI 4.1SP5 to 4.2SP2. As a migration procedure UMT does not copy Audit DB conents. So, Can anyone help how we should copy contents of existing DB(Oracle 11) to newly created DB(Oracle 12).

      P.S. We have auditing functional in New Environment only Audit data history has become an issue at the moment. TIA!

      Regards,

      Vikram.

      Author's profile photo Frau Saba Wali
      Frau Saba Wali

      Hi there,it will be work for SAP BusinessObjects 4.2 and crystal reports 2016?many thanks for any Help

       

      Author's profile photo Manikandan Elumalai
      Manikandan Elumalai
      Blog Post Author

      The steps and the sample provided in this blog is pretty old and for BI 4.2 I would suggest you to take a look here and fully utilize thw WebI samples. The comments section in the below blog should should answer your queries.

      https://blogs.sap.com/2015/07/15/unlock-the-auditing-database-with-a-new-universe-and-web-intelligence-documents-for-bi41/

      Author's profile photo Kim Yoke Lo
      Kim Yoke Lo

      Hi Elumalai,

      I having below error when open the unx.

      while trying to invoke the method com.businessobjects.mds.resource.archive.ContentType.toString() of a null object returned from com.businessobjects.mds.resource.archive.Archive$ArchiveManifest.getContentType()

      Please help