update_audit_settings

Updates the current audit settings in the repository and restarts the OMS. Only Enterprise Manager Super Administrators have permission to view the audited data.

Format

emcli update_audit_settings
      [-audit_switch="ENABLE|DISABLE"]
      [-operations_to_enable="name_of_operations_to_enable"]
      [-operations_to_disable="name_of_operations_to_disable"]
      [-externalization_switch="ENABLE|DISABLE"]
      [-directory="directory_name"]
      [-file_prefix="file_prefix"]
      [-file_size="file_size"]
      [-data_retention_period="data_retention_period"]

[ ]  indicates that the parameter is optional

Options

  • audit_switch

    Audit switch to enable auditing across Enterprise Manager.

  • operations_to_enable

    Enables auditing for specified operations. To enable all operations, specify ALL. this option is invalid if auditing is disabled.

  • operations_to_disable

    Disables auditing for specified operations. To disable all operations, specify ALL. this option is invalid if auditing is disabled.

  • externalization_switch

    Enable the audit data export service. The default value is DISABLE.

  • directory

    Database directory that is configured with an OS directory where the export service archives the audit data files. This directory is required to externalize audit data in Enterprise Manager. The update_audit_settings verb assumes that this directory has already been created. The following example creates the database directory EMDIR from the directory /tmp/em_audit_data with read/write permissions for the SYSMAN user: 

    SQL>create directory EMDIR as '/tmp/em_audit_data'; 
Directory created. 
SQL>grant read,write on directory "EMDIR" to SYSMAN; 
Grant succeed.

  • file_prefix

    File prefix to be used by the export service to create the file name where audit data is to be written. The default value is em_audit.

  • file_size

    Maximum value of each file size. The default value for this is 5000000 bytes.

  • data_retention_period

    Maximum period the Enterprise Manager repository stores audit data. The default value is 365 days.

Examples

Example 1

This example enables all operations except LOGIN and LOGOUT:

emcli update_audit_settings
          -audit_switch="ENABLE"
          -operations_to_enable="ALL"
          -operations_to_disable="LOGIN;LOGOUT"

Example 2

This example enables Weblogic Server specific operations to be audited. 

emcli update_audit_settings
     -operations_to_enable="WEBLOGIC_DOMAIN_UPDATE_INVOKE;WEBLOGIC_DOMAIN
     _LOGIN;WEB_LOGIC_DOMAIN_LOGOUT"