Creating audit masks
About this task
You can create masks that more closely match the types of activities that individual users perform than do default and global masks.
Procedure
- To create individual user masks, specify user IDs as mask names.
- To create template masks, preface the name of a mask with an underscore (_). Overview of auditing with the HCL OneDB secure auditing facility describes template masks and user masks.
Example
You specify events in the mask when you create it by using the audit events from the alphabetic listing in the table Audit event codes and fields. You specify events for customized (template and user) audit masks the same way that you do for the _default, _require, and _exclude audit masks.
For example, you might want to create three template masks with different levels of security: _low, _medium, and _high. Alternatively, you might require just two templates for familiar and unfamiliar users that you copy to individual user masks: _guest and _trusted.