This documentation applies to the 8.1 version of BMC Atrium Core, which is in "End of Version Support." You will not be able to leave comments.

To view the latest version, select the version from the Product version menu.

Configuring auditing for a class

You can use the BMC Atrium CMDB Class Manager to configure auditing for a class and specify which attributes in that class are included in an audit.

Creating or modifying classes process

Auditing changes to instance data

You can keep a history of changes to instance data, which is called auditing. You enable auditing on a per-class basis, and you select which attributes trigger an audit and which are written as a result. An audit is triggered when an instance is created or deleted or when the value of one or more selected attributes changes as the result of an instance being modified. The new value must be different from the existing value to trigger an audit. Copying the same attribute value does not trigger an audit. For example, during reconciliation, a merge activity replaces the existing 348981 value for the SerialNumber attribute with 348981. This does not change the value and does not trigger an audit.

Note

  • By default, no classes in the data model are configured for auditing. Select an auditing strategy wisely, limiting class auditing to business-critical situations. As the number of classes with auditing increases, system performance might slow.
  • Auditing a class does not invoke auditing of an attribute. If you want to enable auditing in the class manager but have no attributes configured then audit records will not be generated. You must either enable auditing for an attribute on the class that owns the attribute or on the class itself, and not on both.
    BMC_BaseElement being a master class, will not have any class level auditing enabled on it. However, attribute level auditing will be enabled for BMC_BaseElement and then enabled at a specific class. For example BMC_ComputerSystem class would be enabled for attribute auditing that is set to be audited at the BMC_BaseElement class.
    BMC_BaseElement is not a data container and has no relationship mapping, hence auditing BMC_BaseElement may not be of much use. You can enable auditing at a specific class level.


For more information, see:

To configure auditing for a class

  1. In the Class Manager, right-click on the class to open a class for editing.
  2. In the General tab of the CI Class dialog box, expand the Auditing section.
  3. In the Audit Type field, select Copy or Log, as described in Audit types in classes.
  4. If you selected Log auditing, enter the name of the log form in the Audit Log Form field, or accept the default form name, CMDB:DefaultAuditLog.
    This form stores log entries for this class. If the form that you specify does not exist, it is created automatically.
  5. In the Qualification field, type a qualification to specify which instances of the class are audited.
    For example, the following qualification specifies that only instances in the BMC.ASSET dataset are audited:
    'DatasetId' = "BMC.ASSET"
    If you want all instances to be audited when they are created and deleted and when a selected attribute is changed, leave this field blank.
  6. Click the Attributes tab.
  7. Select an attribute that you want to be included in audits and click Edit.
  8. From the Audit Option menu, select an option for this attribute, as described in Attribute audit options in classes.
  9. In the Attribute dialog box, click OK.
  10. Repeat step 7 through step 9 for each attribute that should be included in audits.
  11. In the Class dialog box, click OK.
  12. In the confirmation dialog box, click OK.

Audit types in classes

You can specify the following types of audit when modifying a class:

  • Copy — Creates a copy of each audited instance. When you enable Copy auditing for a class, each BMC Remedy AR System form pertaining to that class is duplicated to create audit forms that hold audited instances. This includes forms from superclasses, because they hold data for instances of their subclasses.
  • Log — Creates an entry in a log form that stores all attribute values from the audited instance in one field. When you enable Log auditing for a class, you specify the name of the log form to use. If this form does not already exist, it is created automatically. You can use the same log form with multiple classes.

Note

You cannot use Log auditing above Copy auditing in the inheritance tree. This means that if you already have Copy auditing enabled for a class, you cannot enable Log auditing for any of its superclasses, and if you already have Log auditing enabled for a class you cannot enable Copy auditing for any of its subclasses. This is due to the structure of audit forms. For more information about audit forms, see Types of auditing.

Attribute audit options in classes

Using the following attribute audit options to specify which attributes trigger an audit and which are written during an audit:

  • None — Changes to this attribute do not trigger an audit. NULL is written to this field in the audit form in a Copy audit, and nothing is written to the Log field in a Log audit. This option is the default.
  • Audit — When the value of this attribute changes, an audit is triggered and the attribute value is written to the audit form or log form. When another attribute triggers an audit, this attribute is not written.
  • Copy — Changes to this attribute do not trigger an audit, but the attribute value is written to the audit form or log form when another attribute triggers an audit.
  • Audit & Copy — When the value of this attribute changes, an audit is triggered. This attribute value is written to the audit form or log form in any audit, regardless of whether its value changed.

As long as there is at least one Audit, Copy, or Audit & Copy attribute for a class, a Create or Delete operation triggers an audit regardless of the values of such attributes. Audit, Copy, and Audit & Copy attributes are all written during such an audit.

This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Comments

  1. Daniel Hudsky

    Auditing on a CMDB Class does not invoke audit of a BMC Attribute. Basically if you just turn on Auditing in the Class Manager but have no attributes configured then there will be nothing in the Audit records. Enable Attribute auditing at the Class that owns, but then enable Audting at the Class you actually want audited. Not both.

    Also, BMC_BaseElement is a master class and would not have any auditing enabled on it at the class level. This is true even with a qualification to add ClassId = 'SomeClass'.

    Our guides define the Class level auditing and Attribute auditing. Only Attribute level auditing would be enabled at BaseElement and then enabled at a specific Class. For example BMC_ComputerSystem Class would be enabled for Audit of an Attribute that is set to be audited at the BMC_BaseElement class.

    Auditing BaseElement has almost no benefit as this class that has no relationship mapping and is not a data container. It is the right side of a composite view that combines Class_ and AssetBase table into one view. It's function is to define a common set of attributes for all classes to inherit. Audit of a Class must be enabled at specific class, not the BaseElement.

    Jul 28, 2014 04:08
  2. Gus Traylor

    I found part of this document to not work as described.  

    5.In the Qualification field, type a qualification to specify which instances of the class are audited.For example, the following qualification specifies that only instances in the BMC.ASSET dataset are audited:'DatasetId' = "BMC.ASSET"

    If you want all instances to be audited when they are created and deleted and when a selected attribute is changed, leave this field blank.

    I had to add an OR statement and include each Dataset in order for the auditing to include other datasets.  If I removed the qualification and performed an audit event it was not captured.  I would get a message in the CMDB audit like "No History available for the selected instance".  


    Sep 08, 2017 02:21
    1. Nidhi Das

      Hello Gus,

      I will discuss this with the concerned SME and will write back to you.

      Regards,
      Nidhi


      Sep 11, 2017 01:48
    1. Sachin Tappe

      I tried to reproduce the issue on CMDB 8.1 SP2 and 9.1.03 versions but I am unable to reproduce it.
      The steps I followed are
      1. Enable Audit on ComputerSystem Class with Log type audit. Enable audit on Domain attribute with type "Audit". The audit qualification is set as 'datasetId' = "BMC.ASSET".
      2. Create/Update two CIs, in BMC.ASSET and BMC.SAMPLE datasets each, add value to Domain attribute. Only BMC.ASSET CI is audited.
      3. Update Audit Qualification and set it to NULL.
      4. Repeat #2. This time both BMC.ASSET and BMC.SAMPLE Cis get audited.

      Is there anything that am I missing? Please let me know.

      Sep 15, 2017 05:23