About Oracle Business Intelligence Publisher

13-6 Oracle Fusion Middleware Application Security Guide ■ Report Parameters - filters to restrict the data included in the report, for example records for the last hour only. ■ Job Properties - the job name, formatting locale and time zone, and so on. ■ Notification - one or more users to be notified by E-mail when the job completes or fails. ■ Time - report scheduling options; the report can be scheduled to run periodically or on a one-time basis. ■ Delivery - deliver the report to one or more users

13.2 Organization of Audit Reports

Oracle Fusion Middleware Audit Framework ships with a set of pre-defined reports that are designed to work, out-of-the-box, with Oracle Fusion Middleware components. These reports are organized into two main categories: ■ Common Reports These reports capture common events such as authentication success and failures, account-related status lockout, disabled, and so on. Many components have implemented audit capability for these common events. The common reports are located under the Common Reports subfolder of the Audit Reports, and all audit-enabled events from across the components are captured in these reports. For example, Authentication History displays authentication history across all the components where authentication events are being captured. You can use these reports to examine audit records for a specific area across components or to examine the audit records of a single user across multiple components for that specific area. ■ Component-specific Reports These reports focus on individual components. They are needed because not all audit events may be relevant to each component. The Component Specific folder serves two purposes. First, it identifies the valid reports among the Common Reports that are relevant to the component and show only the audit records for that component. Secondly, for some components, component-specific reports have been defined to suit the specific needs of that component. While audit records themselves are generic for all the components, the representation of an audit record may have component-specific requirements. For example, an access policy may need to be shown in a format to be useful. For example, you can locate the Authentication History report in the Common folder, where it displays authentication events for all components. You can also find the same report under a component-specific folder, where it displays authentication events for that component only. ■ There is also a generic report at the top level called All Events, which shows all the events across all audit-enabled components. The All Events report is also available in each component-specific folder, to show all the events for individual components. This report can be used to query audit data. See Also: Section 13.1.5, Set Up Audit Report Filters Using Audit Analysis and Reporting 13-7

13.3 View Audit Reports

This section explains how to view audit reports using Oracle Business Intelligence Publisher. Take these steps to view an audit report: 1. Log in to Oracle Business Intelligence Publisher using a URL of the form: http:host.domain.com:portxmlpserver

2. On the main page, click Oracle Fusion Middleware Audit under Shared Folders.

3. The audit reports are organized into: ■ reports that are common to multiple components; these are further organized by report types ■ reports that are specific to a component; these are further organized by component 4. Navigate to the report of interest; for example, you can click on the Common Reports folder, then Errors and Exceptions, then click on All Errors and Exceptions. The report is displayed. 5. The report display page contains these major areas: ■ Filters at the top of the page enable you to determine the type, scope, and number of records to include in the report. These filters include: – User – Start and End Dates – Last n time period – Component type and name – Application Name – Domain Name Use relevant filters to limit the report to the desired records. ■ Format control buttons enable you to determine: – the template type, which can be: HTML - This is the default display format. PDF - Displays a printable PDF view. Data - Displays an unformatted XML data set. To change the template type while viewing a report, select the type from the drop-down list and click View. – output format See Also: Table 13–1 for a description of the standard reports. Note: Initially, the report is displayed with default filter values that you can modify. 13-8 Oracle Fusion Middleware Application Security Guide – delivery options ■ The report record display area. The appearance and number of columns depend on previously selected options and filters. Each column header also acts as a sort option. 6. View, save or export the report as desired.

13.4 Example of Oracle Business Intelligence Publisher Reports

This section uses a common scenario to demonstrate how Oracle Business Intelligence Publisher reports are used to view audit data generated by Oracle Platform Security Services events. In this example, some activity is generated on the credential store for an Oracle WebLogic Server domain. We then use Oracle Business Intelligence Publisher to take a look at the relevant report to see the audit records. Subsequently, a few other reports are examined. 1. As the system administrator, locate the domain whose credentials are to be managed. 2. Use the relevant commands to generate some credential management records; for example, create and delete some user credentials. 3. Log in to Oracle Business Intelligence Publisher using a URL of the form: http:host.domain.com:portxmlpserver

4. Under the Reports tab, click on Shared Folders, and select Fusion Middleware

Audit.

5. On the main page, click Fusion Middleware Audit under Shared Folders.

6. The audit report menu appears. Audit reports are organized in various folders by type. 7. To view audit records for Oracle Platform Security Services, for example, navigate to the Component Specific folder, then Oracle Platform Security Services.

8. The Oracle Platform Security Services folder contains several reports. Click All

Events . The report shows activity in a default time range. Modify the time range to show only the day’s events. The activity performed on that day appears on the page. Observe the different regions of the report and their functions: report filters, format control, scheduling, and the data display itself. See Also: Section 10.2, Managing the Credential Store for details about credential management.