SAP Knowledge Base Article - Preview

1581887 - Audit log files are not written to the Audit database

Symptom

  • Some of audit logs are corrupted as they don't have extension name in their file name
  • Audit backlogs are kept in <INSTALL>/bobje/data/Auditing for Unix and <INSTALL>\BusinessObjects Enterprise 12.0\Auditing for Windows in non-chronological order
  • Those backlogs are not injected to the auditing database.
  • When CMS is restarted, those backlogs maybe successfully injected to the database and deleted from the above folder
  • The following logs are observed in boe_cmsd_<timestamp>_trace.log

2011/04/13 07:48:40.562|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #0 time
2011/04/13 07:48:41.062|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #1 time
2011/04/13 07:48:41.562|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #2 time
2011/04/13 07:48:42.063|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #3 time
2011/04/13 07:48:42.563|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #4 time
2011/04/13 07:48:43.063|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #5 time
2011/04/13 07:48:43.563|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #6 time
2011/04/13 07:48:44.064|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #7 time
2011/04/13 07:48:44.564|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #8 time
2011/04/13 07:48:45.064|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt.  Retrying #9 time
2011/04/13 07:48:45.564|==| | |176330|8227| |||||||||||||||AuditeeManager::AuditEventCache::getData: Cannot open file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt to read.  Skipping...

2011/09/17 06:45:48.065|>>|A| |10980|12616| |||||||||||||||assert failure: (.\AuditDatabaseSubsystem_impl.cpp:596). (m_pStmt->GetClob(DETAIL_COLUMN_Text, detailText) : no message).
.\AuditDatabaseSubsystem_impl.cpp:596: TraceLog message 4402
2011/09/17 06:45:48.080|>>|A| |10980|12616| |||||||||||||||assert failure: (.\AuditDatabaseSubsystem_impl.cpp:596). (m_pStmt->GetClob(DETAIL_COLUMN_Text, detailText) : no message).
.\auditsubsystem_impl.cpp:2651: TraceLog message 4403
2011/09/17 06:46:58.254|>>|A| |10980|12616| |||||||||||||||assert failure: (.\auditsubsystem_impl.cpp:2651). (false : Next event id value should be greater than the current one, check the auditee packing events code).
.\auditsubsystem_impl.cpp:2651: TraceLog message 4404
2011/09/17 06:46:58.442|>>|A| |10980|12616| |||||||||||||||assert failure: (.\auditsubsystem_impl.cpp:2651). (false : Next event id value should be greater than the current one, check the auditee packing events code).

 


Read more...

Environment

BusinessObjects Enterprise XI 3.1

Product

SAP BusinessObjects Business Intelligence platform 4.0 ; SAP BusinessObjects Enterprise XI 3.1

Keywords

KBA , BI-BIP-SRV , CMS / Auditing issues (excl. 3rd Party Authentication) , BI-BIP-ADM , BI Servers, security, Crystal Reports in Launchpad , Bug Filed

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.