pga72 Absent Member.
Absent Member.
241 views

Reports: find all changes by admin, find all recent changes?


Hi

I'm trying to find reports (IDM 4.0.1. Reporting Module) to answer the
following 2 questions:
1. list all changes done by a specific admin during a certain time
period
2. list all changes during a time period -> for example to find out
which users were changed in the last 4 hours, and who (admin or process)
initiated the change

any pointers, ideas?

thanks, Peter


--
pga72
------------------------------------------------------------------------
pga72's Profile: http://forums.novell.com/member.php?userid=116061
View this thread: http://forums.novell.com/showthread.php?t=451974

Labels (1)
0 Likes
7 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Reports: find all changes by admin, find all recent changes?

On 02/08/2012 04:26 AM, pga72 wrote:
>
> Hi
>
> I'm trying to find reports (IDM 4.0.1. Reporting Module) to answer the
> following 2 questions:
> 1. list all changes done by a specific admin during a certain time
> period
> 2. list all changes during a time period -> for example to find out
> which users were changed in the last 4 hours, and who (admin or process)
> initiated the change
>
> any pointers, ideas?
>
> thanks, Peter
>
>

Greetings,
That sounds more like a "Compliance" kind of report. You would get
that kind of information with having all of your Application sending
their "Audit" data to Sentinel.

--
Sincerely,
Steven Williams
Lead Software Engineer
NetIQ
0 Likes
pga72 Absent Member.
Absent Member.

Re: Reports: find all changes by admin, find all recent changes?


Hi Steven

not sure about this being compliance related only. I've seen these
questions come up frequently when something went wrong, to find out what
else (or rather who else) might be affected as well. Example: Admin A
did something and then went home. Admin B gets a ticket from a user, and
tries to figure out what happened. Then he finds that something basic
went wrong, so he needs to find out what else (besides the user who
opened the ticket) might be affected.

Most of these audit events would likely come from the user application
(changes to roles / resources, changes to role / resource assignment
etc). Does the user application provide such audit data?

thanks, Peter


--
pga72
------------------------------------------------------------------------
pga72's Profile: http://forums.novell.com/member.php?userid=116061
View this thread: http://forums.novell.com/showthread.php?t=451974

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Reports: find all changes by admin, find all recent changes?

On 02/13/2012 09:16 AM, pga72 wrote:
>
> Hi Steven
>
> not sure about this being compliance related only. I've seen these
> questions come up frequently when something went wrong, to find out what
> else (or rather who else) might be affected as well. Example: Admin A
> did something and then went home. Admin B gets a ticket from a user, and
> tries to figure out what happened. Then he finds that something basic
> went wrong, so he needs to find out what else (besides the user who
> opened the ticket) might be affected.
>
> Most of these audit events would likely come from the user application
> (changes to roles / resources, changes to role / resource assignment
> etc). Does the user application provide such audit data?
>
> thanks, Peter
>
>

Greetings Peter,
The "Reporting" reports that come with the Reporting Module do not
have that kind of data. The DCS Driver sends only that "Steve has Role
A". Or "Steve was removed from AlphaGroup". So, it is just the
"Change event" that is sent from the DCS to the Identity Warehouse from
which the Reporting Module looks at.
The User Application does provide "Audit" events. The exact Audit
events that we send are outlined on:

http://www.novell.com/documentation/idm401/agpro/?page=/documentation/idm401/agpro/data/b2iix14.html

--
Sincerely,
Steven Williams
Lead Software Engineer
NetIQ
0 Likes
pga72 Absent Member.
Absent Member.

Re: Reports: find all changes by admin, find all recent changes?


Hi Steven

thanks! So if I understand the documentation correctly, I would need
"novell audit report" in addition to the IDM reporting module /
appliance, right? However, I cannot seem to find any current reference
to this product on the Novell website? Was this incorporated into
something else?

thanks, Peter


--
pga72
------------------------------------------------------------------------
pga72's Profile: http://forums.novell.com/member.php?userid=116061
View this thread: http://forums.novell.com/showthread.php?t=451974

0 Likes
Knowledge Partner
Knowledge Partner

Re: Reports: find all changes by admin, find all recent changes?

On 2/14/2012 4:56 AM, pga72 wrote:
>
> Hi Steven
>
> thanks! So if I understand the documentation correctly, I would need
> "novell audit report" in addition to the IDM reporting module /
> appliance, right? However, I cannot seem to find any current reference
> to this product on the Novell website? Was this incorporated into
> something else?


For Audit events, a first glance would make you think that Reporting
could handle some of it.

Otherwise Sentinel if you need correlation, or Sentinel Log Manager if
you just want to track it.

0 Likes
hello_amigo1 Absent Member.
Absent Member.

Re: Reports: find all changes by admin, find all recent changes?


It would be very helpful to get the list of events which Reporting could
handle.


--
hello_amigo
------------------------------------------------------------------------
hello_amigo's Profile: http://forums.novell.com/member.php?userid=101672
View this thread: http://forums.novell.com/showthread.php?t=451974

0 Likes
Knowledge Partner
Knowledge Partner

Re: Reports: find all changes by admin, find all recent changes?

On 2/14/2012 9:06 AM, hello amigo wrote:
>
> It would be very helpful to get the list of events which Reporting could
> handle.


Me too! So looking at Reporting, it is basically a baby copy of SLM as
opposed to Sentinel RD/full.

So you get the event collectors/connectors model. This all comes into
the EAS which is really a sentinel LM style DB. (Of course newer SLM
uses Lucene instead of PostGress, but whatever).

So anything coming across the Audit connector, (i.e. What eDir/IDM can
send) it seems like Reporting can store it.

However, the question becomes reporting upon it.



0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.