16.2.3 Application Process Audit Log

This section explains the application process audit log.

Usage

To obtain the process instance audit log for the application process, execute the get process instance audit information command.

Installation_folder\SWRBAM\bin\swrba_audit

The process instance audit information that can be obtained will be the process instance information that was complete after the command was executed the previous time.

Privilege Required/Execution Environment

[Windows Manager]

Administrator privileges are required. If the operating system is Windows Server 2008, execute as the administrator.
This command can be executed on the admin server.

[Linux Manager]

System administrator (superuser) privileges are required.
This command can be executed on the admin server.

Output files

The following table shows the file name, file size, and generations of the audit log:

Log name	Description	File size	Number of generations
swrba_audit.log	Audit logs are output.	10 MB	10 (*)

* Note:

The trigger for the generation switchover is when the file exceeds 10MB.
If the file size does not reach 10 MB, the log continues to be output to the same file even if the swrba_audit command is executed multiple times.
Once 10 generations (100 MB) is exceeded, the oldest file (swrba_audit9.log) is deleted.

Destination

The table below shows the log output destination.

[Windows Manager]

Output folder	Output destination files
Installation_folder\SWRBAM\var\audit	swrba_audit.log.[n] (n is the generation)

[Linux Manager]

Output folder	Output destination files
/opt/FJSVswrbam/var/audit	swrba_audit.log.[n] (n is the generation)

Output format

The audit log is a CSV format file. The following items are output in the following order.
One item of process instance information is displayed as one record.

"Process instance start time","Process instance starter","Process instance name","Process instance state","Process instance end time","Activity name","Task execution date/time","Person responsible","Status","Task process",...,"Result of application"

Item	Description
Process instance start time	Time when the application was executed
Process instance starter	User ID of applicant
Process instance name	Process instance name L-PlatformSubscription_xxx,L-PlatformChange_xxx,L-PlatformUnsubscription_xxx
State of process instance	State of process instance closed: Closed
Process instance end time	Time that the process instance ended yyyy-mm-dd hh:mm:ss.sss
Activity name	Activity name Application,Approve,Assess,Pending state,Cancel
Task execution date/time	The date/time the task was executed
Person responsible	User ID of the user that executed the task
Status	Shows the state of task COMPLETED: Completed
Task process	Button name executed by the activity: Application: Apply Approve: 0:Approve or 1:Reject Assess: 0:Accept or 1:Dismiss Pending state : 0:Cancel Cancel: 0:Cancel
Result of application	Result of application: Accepted: When [Accept] is executed for an assessment task Approved: When [Approve] is executed for an approval task (when ApproverOnly) Rejected: When [Reject] is executed for an approval task Dismissed: When [Dismiss] is executed for an assessment task Canceled: When [Cancel] is executed for a cancellation task Canceled: When [Cancel] is executed for a pending task

Output example

The example below shows the output of the audit information for the process instance with the name "L-Platform usage application_100".

"2012-04-11 17:03:53.580","tenant_user001","L-PlatformSubscription_100","closed","2012-04-11 17:04:25.471","Application","2012-04-11 17:03:56.111","tenant_user001","COMPLETED","Apply","Approve","2012-04-11 17:04:15.908","tenant_admin001","COMPLETED","0:Approve","Assess","2012-04-11 17:04:21.346","infra_admin001","COMPLETED","0:Accept","Accepted"

Point

Using an operating system feature such as Task Scheduler (Windows Manager) or cron (Linux Manager), configure the settings so that the get process instance audit information command is executed at fixed intervals so that an audit log of process instances can be obtained between command executions.