Open the opmn.xml file, which resides in

Configuring and Managing Auditing 12-11

12.3 Managing Audit Policies

What is an Audit Policy? An audit policy is a declaration of the type of events to be captured by the audit framework for a particular component. For Java components, the audit policy is defined at the domain level. For system components, the audit policy is managed at the component instance level. For example, an audit policy could specify that all authentication failures should be audited for an Oracle Internet Directory instance. How Policies are Configured Oracle Fusion Middleware Audit Framework lets you configure audit policies and provides highly granular controls over the types of events and data being audited. Policies can be configured through the Enterprise Manager UI tool and through the WLST command-line interface. Policy Changes Require Server or Instance Restart When creating or updating audit policies, note that: ■ for Java components, policy changes at the domain level require that all managed servers on which the affected components and applications are running be restarted. ■ for system components, policy changes require the affected component instance to be restarted. The remainder of this section explains how to view, and update audit policy: ■ Manage Audit Policies for Java Components with Fusion Middleware Control ■ Manage Audit Policies for System Components with Fusion Middleware Control ■ Manage Audit Policies with WLST

12.3.1 Manage Audit Policies for Java Components with Fusion Middleware Control

The domain Audit Policy Settings page manages audit events for all Java components such as Oracle Identity Federation, and system libraries like Oracle Platform Security Services. See Also: ■ Section 11.3.2, Key Technical Concepts for additional background. ■ Appendix D, Oracle Fusion Middleware Audit Framework Reference for a list of Java components and system components. ■ Oracle Fusion Middleware Third-Party Application Server Guide for details about executing audit commands on third-party application servers.