Monitoring DirX Audit Data with Reports

The reports described in this section give an overview of the data in the DirX Audit Data Database (audit messages) and the DirX Audit History database (history entries) and especially on exceptions that deserve administrative attention. Consider running a subset of these reports on a regular basis.

Reports for Monitoring the DirX Audit Database

The reports described here give an overview of the number of audit events or history entries.

Audit events database status

This report shows charts on the number of audit events produced in the selected time range, grouped by Source, Operation and What Type in total and for a specific year, month and day.

The input parameters are:

  • When - defines a valid time range for the report. The finish date is the When time point (for example, 15/05/2020, 10:00).

  • Create short report - generates the report without charts.

  • Total only - generates the report with only totals by Source and the Grand Total. No charts are generated.

History entries database status

This report shows charts on how many history entries have been created in the selected time range, grouped by Entry type name in total and for specific year, month and day.

Input parameters are:

  • When - defines a valid time range for the report. The finish date is the When time point (for example, 15/05/2020, 10:00).

  • Entry types - generates the report with the specified entry types.

  • Create short report - generates the report without charts.

  • Total only - generates the report with the total only.

Reports for Monitoring the DirX Audit History Database

The reports described here give information on history entries that need special attention.

Missing entry links

This report lists history entries that reference other entries and where at least one referenced entry cannot be determined. Per entry type, it lists the link attribute names and, for two selectable time points, the number of missing links for all link attribute values. The Difference column gives the difference between the two time points. A summary line after each entry type shows the relative number trend as a graph and the aggregated numbers for all link attributes.

Input parameters are:

  • When - generates the report for history entries created within two selectable time points.

  • Value valid after - generates the report for history entries created after the specified time point to prevent the inclusion of old or irrelevant history entries.

  • Type name - generates the report for the specified entry type names.

  • Attribute name - generates the report for the specified link attribute names.

  • Create short report - generates the report for attributes that have at least one missing entry link.

  • Overview only - generates the report without a trend chart and detailed information about attributes.

  • Ancient and Fresh - generates the report with the number of missing entry links created before and after the decisive date in two separate columns.

  • Ancient and Fresh decisive date and when - specifies the decisive date time point and the When time point represents the effective date. The column for ancient missing links comprises the period from Value valid after to the decisive date, while the column for fresh links comprises the period from the decisive date to the When time point.

Missing entry links by target system

This report lists account and group history entries where at least one referenced entry cannot be determined. Per target system, it lists the number of missing account-group membership links out of all links for the selected time range. The Difference column gives the difference between the beginning and end of the time range. A summary line after each target system shows the trend as a graph and the aggregated numbers for all link attributes.

Input parameters are:

  • When - generates the report for history entries created within two selectable time points.

  • Value valid after - generates the report for history entries created after the specified time point to prevent the inclusion of old or irrelevant history entries.

  • Target system - generates the report for the specified target systems.

  • Type name - generates the report for the specified entry type names.

  • Attribute name - generates the report for the specified link attribute names.

  • Create short report - generates the report for attributes that have at least one missing entry link.

  • Overview only - generates the report without a trend chart and detailed information about attributes.

  • Ancient and Fresh - generates the report with the number of missing entry links created before and after the decisive date in two separate columns.

  • Ancient and Fresh decisive date and when - specifies the decisive date time point and the When time point represents the effective date. The column for ancient missing links comprises the period from Value valid after to the decisive date, while the column for fresh links comprises the period from the decisive date to the When time point.

Missing entry links with details (CSV format)

This report lists history entries that reference other entries and where at least one referenced entry cannot be determined. It provides details for each entry in CSV format so that it can easily be post-processed by applications like Microsoft Excel. Each line contains the entry type, the entry’s dxrUid, dirxEntryUUID and name, the link attribute name and value and the value’s lifetime (VALID_FROM – VALID_TO).

Input parameters are:

  • When - generates the report for link attribute values created before the specified time point.

  • Value valid after - generates the report for link attribute values created after the specified time point to prevent the inclusion of old or irrelevant history entries.

  • Type name - generates the report for the specified entry type names.

  • Attribute name - generates the report for the specified link attribute names.

Duplicated history entries (CSV format)

This report produces a list of history entries that are considered duplicates in CSV format so that it can easily be post-processed by applications like Microsoft Excel. Each line shows the identifier of the duplicated part (ENTRY, DN, DIRX_ENTRY_UUID), the entry type, then the entry’s dxrUID, dirxEntryUUID, name, DN and lifetime (VALID_FROM - VALID_TO).

Input parameters are:

  • When - the report contains only those history entries that have been created before this time point.

  • Entry - the report includes duplicate history entries linked to the same logical entry.

  • DN - the report includes history entries with multiple records having the identical DN value.

  • DIRX_ENTRY_UUID - the report includes history entries with duplicate DIRX_ENTRY_UUID values.

  • Entry types - generates the report for the specified entry types.