Symptom
- Some of audit logs are corrupted as they don't have extension name in their file name
- Audit backlogs are kept in <INSTALL>/bobje/data/Auditing for Unix and <INSTALL>\BusinessObjects Enterprise 12.0\Auditing for Windows in non-chronological order
- Those backlogs are not injected to the auditing database.
- When CMS is restarted, those backlogs maybe successfully injected to the database and deleted from the above folder
- The following logs are observed in boe_cmsd_<timestamp>_trace.log
2011/04/13 07:48:40.562|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #0 time
2011/04/13 07:48:41.062|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #1 time
2011/04/13 07:48:41.562|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #2 time
2011/04/13 07:48:42.063|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #3 time
2011/04/13 07:48:42.563|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #4 time
2011/04/13 07:48:43.063|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #5 time
2011/04/13 07:48:43.563|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #6 time
2011/04/13 07:48:44.064|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #7 time
2011/04/13 07:48:44.564|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #8 time
2011/04/13 07:48:45.064|==| | |176330|8227| |||||||||||||||AuditeeManager::EventCache::newReadStreamWithRetry: Fail to create readstream on file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt. Retrying #9 time
2011/04/13 07:48:45.564|==| | |176330|8227| |||||||||||||||AuditeeManager::AuditEventCache::getData: Cannot open file /usr/local/boxi/bobje/data/Auditing/audit-004e00350032004100300031002e0063006d0073-399F4DA5A4CA0011.txt to read. Skipping...
2011/09/17 06:45:48.065|>>|A| |10980|12616| |||||||||||||||assert failure: (.\AuditDatabaseSubsystem_impl.cpp:596). (m_pStmt->GetClob(DETAIL_COLUMN_Text, detailText) : no message).
.\AuditDatabaseSubsystem_impl.cpp:596: TraceLog message 4402
2011/09/17 06:45:48.080|>>|A| |10980|12616| |||||||||||||||assert failure: (.\AuditDatabaseSubsystem_impl.cpp:596). (m_pStmt->GetClob(DETAIL_COLUMN_Text, detailText) : no message).
.\auditsubsystem_impl.cpp:2651: TraceLog message 4403
2011/09/17 06:46:58.254|>>|A| |10980|12616| |||||||||||||||assert failure: (.\auditsubsystem_impl.cpp:2651). (false : Next event id value should be greater than the current one, check the auditee packing events code).
.\auditsubsystem_impl.cpp:2651: TraceLog message 4404
2011/09/17 06:46:58.442|>>|A| |10980|12616| |||||||||||||||assert failure: (.\auditsubsystem_impl.cpp:2651). (false : Next event id value should be greater than the current one, check the auditee packing events code).
Read more...
Environment
BusinessObjects Enterprise XI 3.1
Product
Keywords
KBA , BI-BIP-SRV , CMS / Auditing issues (excl. 3rd Party Authentication) , BI-BIP-ADM , BI Servers, security, Crystal Reports in Launchpad , Bug Filed
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview