IV94895: DETAILED SQL AUDIT LOG OF SPECIFIC USER GROUP(S)

8.1.0-TIV-NCOMNIbus-ZLinux-FP0017
8.1.0-TIV-NCOMNIbus-Windows-FP0017
8.1.0-TIV-NCOMNIbus-Linux-FP0017
8.1.0-TIV-NCOMNIbus-AIX-FP0017
8.1.0-TIV-NCOMNIbus-ZLinux-FP0016
8.1.0-TIV-NCOMNIbus-Windows-FP0016
8.1.0-TIV-NCOMNIbus-Linux-FP0016
8.1.0-TIV-NCOMNIbus-AIX-FP0016
8.1.0-TIV-NCOMNIbus-ZLinux-FP0015
8.1.0-TIV-NCOMNIbus-Windows-FP0015
8.1.0-TIV-NCOMNIbus-Linux-FP0015
8.1.0-TIV-NCOMNIbus-AIX-FP0015
8.1.0-TIV-NCOMNIbus-ZLinux-FP0014
8.1.0-TIV-NCOMNIbus-Windows-FP0014
8.1.0-TIV-NCOMNIbus-Linux-FP0014
8.1.0-TIV-NCOMNIbus-AIX-FP0014
8.1.0-TIV-NCOMNIbus-ZLinux-FP0013
8.1.0-TIV-NCOMNIbus-Windows-FP0013
8.1.0-TIV-NCOMNIbus-Linux-FP0013
8.1.0-TIV-NCOMNIbus-AIX-FP0013
8.1.0-TIV-NCOMNIbus-ZLinux-FP0012
8.1.0-TIV-NCOMNIbus-Windows-FP0012
8.1.0-TIV-NCOMNIbus-Linux-FP0012
8.1.0-TIV-NCOMNIbus-AIX-FP0012
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 12, 8.1.0-TIV-NCOMNIbus-FP0012
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 13, 8.1.0-TIV-NCOMNIbus-FP0013
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 14, 8.1.0-TIV-NCOMNIbus-FP0014
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 15, 8.1.0-TIV-NCOMNIbus-FP0015
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 16, 8.1.0-TIV-NCOMNIbus-FP0016
Tivoli Netcool/OMNIbus 8.1.0 Fix Pack 17, 8.1.0-TIV-NCOMNIbus-FP0017

APAR status

• Closed as new function.

Error description

• Enhancement request for a new optional security audit log. This
  log should track the detailed SQL command activity of users
  belonging to specified user groups. The default user groups to
  be tracked are the 'System' and 'Administrator' user groups.
  Log file rotation should also be supported.
  

Local fix

• Use ObjectServer Audit Triggers as described at:
  https://ibm.biz/BdiY9t
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users who require detailed audit trail of all actions done   *
  * by privileged users.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Existing audit log does not contain enough information.      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply the maintenance vehicles listed in the Problem         *
  * Conclusion.                                                  *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is contained in the following maintenance
  package:
  | fix pack | 8.1.0-TIV-NCOMNIbus-FP0012
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  NETCOOL/OMNIBUS

• Fixed component ID

  5724O4800

Applicable component levels

• R810 PSN

     UP

• R810 PSY

     UP