Symptom
- Some of audit logs are corrupted as they don't have extension name in their file name
- Audit backlogs are kept in <INSTALL>/bobje/data/Auditing for Unix and <INSTALL>\BusinessObjects Enterprise 12.0\Auditing for Windows in non-chronological order
- Those backlogs are not injected to the auditing database.
- When CMS is restarted, those backlogs maybe successfully injected to the database and deleted from the above folder
- The following logs are observed in boe_cmsd_<timestamp>_trace.log
2011/04/13 07:48:40.562|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #0 time
2011/04/13 07:48:41.062|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #1 time
2011/04/13 07:48:41.562|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #2 time
2011/04/13 07:48:42.063|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #3 time
2011/04/13 07:48:42.563|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #4 time
2011/04/13 07:48:43.063|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #5 time
2011/04/13 07:48:43.563|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #6 time
2011/04/13 07:48:44.064|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #7 time
2011/04/13 07:48:44.564|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #8 time
2011/04/13 07:48:45.064|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #9 time
2011/04/13 07:48:45.564|==| | |176330|8227| |||||||||||||||AuditeeManager::AuditEventCache::getData: Cannot open file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt to read. Skipping...
2011/09/17 06:45:48.065|>>|A| |10980|12616| |||||||||||||||assert failure: (.\AuditDatabaseSubsystem_impl.cpp:596). (m_pStmt->GetClob(DETAIL_COLUMN_Text, detailText) : no message).
.\AuditDatabaseSubsystem_impl.cpp:596: TraceLog message 4402
2011/09/17 06:45:48.080|>>|A| |10980|12616| |||||||||||||||assert failure: (.\AuditDatabaseSubsystem_impl.cpp:596). (m_pStmt->GetClob(DETAIL_COLUMN_Text, detailText) : no message).
.\auditsubsystem_impl.cpp:2651: TraceLog message 4403
2011/09/17 06:46:58.254|>>|A| |10980|12616| |||||||||||||||assert failure: (.\auditsubsystem_impl.cpp:2651). (false : Next event id value should be greater than the current one, check the auditee packing events code).
.\auditsubsystem_impl.cpp:2651: TraceLog message 4404
2011/09/17 06:46:58.442|>>|A| |10980|12616| |||||||||||||||assert failure: (.\auditsubsystem_impl.cpp:2651). (false : Next event id value should be greater than the current one, check the auditee packing events code).
Read more...
Environment
BusinessObjects Enterprise XI 3.1
Product
Keywords
KBA , BI-BIP-SRV , CMS / Auditing issues (excl. 3rd Party Authentication) , BI-BIP-ADM , BI Servers, security, Crystal Reports in Launchpad , Bug Filed
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.