You can track custom events through their assigned event
codes.
About this task
You can create custom events to track application-specific
events such as:
- Access to confidential data
- Attempted access to application features that the user is not
authorized to use
- Access to application outside office hours
Procedure
- Log on to AccessAdmin.
- Select .
- Add each pair of event code and display text to List
of custom audit event codes and their corresponding display names.
Each event is entered as <Event Code>,<Display
Text>, where the event code is a hexadecimal code in the
range 0x43015000 to 0x43015FFF,
inclusive.
For example, 0x43015001,Access
to confidential data.
- Click Update.
- Using AccessStudio,
create an AccessProfile that
tracks the event and submits an audit log with that event code.
For more information about creating AccessProfiles,
see the IBM® Security
Access Manager for Enterprise Single Sign-On AccessStudio Guide.