Examples
The following examples describe a standard usage of the auditing feature.
In the following example, user
root
successfully retrieves the definition of a
job named MyTestJob using the jobstore
command.
<CommonBaseEvent
creationTime="2007-06-21T16:05:19.455Z"
extensionName="TDWB_JOB_AUDIT_EVENT"
globalInstanceId="CE8F5E102AE3419AF7A1DC201135463A40"
sequenceNumber="188"
version="1.0.1">
<extendedDataElements
name="userInfoList"
type="noValue">
<children
name="userInfo"
type="string">
<values>root</values>
</children>
</extendedDataElements>
<extendedDataElements
name="action"
type="string">
<values>get</values>
</extendedDataElements>
<extendedDataElements
name="outcome"
type="noValue">
<children
name="result"
type="string">
<values>SUCCESSFUL</values>
</children>
</extendedDataElements>
<extendedDataElements
name="objectInfoList"
type="noValue">
<children
name="objectInfo"
type="noValue">
<children
name="objectClass"
type="string">
<values>Job</values>
</children>
<children
name="objectName"
type="string">
<values>MyTestJob</values>
</children>
<children
name="objectIdentifier"
type="string">
<values>3ebf6d62-0b83-3270-9b83-83c393e9cbca</values>
</children>
<children
name="objectSubmitterType"
type="string">
<values>TDWB CLI</values>
</children>
</children>
</extendedDataElements>
<extendedDataElements
name="CommonBaseEventLogRecord:sequenceNumber"
type="long">
<values>80808</values>
</extendedDataElements>
<extendedDataElements
name="CommonBaseEventLogRecord:threadID"
type="int">
<values>280</values>
</extendedDataElements>
<sourceComponentId
application="JobManagement"
component="None"
componentIdType="Application"
location="tdws08"
locationType="Hostname"
subComponent="None"
threadId="Default : 84"
componentType="http://www.ibm.com/namespace/autonomic/Tivoli_componentTypes"/>
<situation
categoryName="ReportSituation">
<situationType
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="ReportSituation"
reasoningScope="INTERNAL"
reportCategory="SECURITY"/>
</situation>
</CommonBaseEvent>
In the following example, user
testuser
tries deleting a job instance named
MySecondJob using the appropriate command line. The operation fails because
the job was submitted by another user. Deleting jobs submitted by other users requires
Operator
or Administrator
rights. For more
information on access rights, see HCL Workload Automation: Scheduling
Workload Dynamically or HCL Workload Automation:
Administration Guide.
<CommonBaseEvent
creationTime="2007-06-21T16:05:32.746Z"
extensionName="TDWB_JOB_AUDIT_EVENT"
globalInstanceId="CE8F5E102AE3419AF7A1DC20113D32BB20"
sequenceNumber="189"
version="1.0.1">
<extendedDataElements
name="userInfoList"
type="noValue">
<children
name="userInfo"
type="string">
<values>testuser</values>
</children>
</extendedDataElements>
<extendedDataElements
name="action"
type="string">
<values>cancel</values>
</extendedDataElements>
<extendedDataElements
name="outcome"
type="noValue">
<children
name="result"
type="string">
<values>UNSUCCESSFUL</values>
</children>
<children
name="failureReason"
type="string">
<values>userNotAuthorized</values>
</children>
</extendedDataElements>
<extendedDataElements
name="objectInfoList"
type="noValue">
<children
name="objectInfo"
type="noValue">
<children
name="objectClass"
type="string">
<values>Job</values>
</children>
<children
name="objectName"
type="string">
<values>MySecondJob</values>
</children>
<children
name="objectIdentifier"
type="string">
<values>a05732c8-c008-3103-afd1-84b567d78de7</values>
</children>
<children
name="objectSubmitterType"
type="string">
<values>TDWB CLI</values>
</children>
</children>
</extendedDataElements>
<extendedDataElements
name="CommonBaseEventLogRecord:sequenceNumber"
type="long">
<values>80964</values>
</extendedDataElements>
<extendedDataElements
name="CommonBaseEventLogRecord:threadID"
type="int">
<values>292</values>
</extendedDataElements>
<sourceComponentId
application="JobManagement"
component="None"
componentIdType="Application"
location="tdws08"
locationType="Hostname"
subComponent="None"
threadId="Default : 91"
componentType="http://www.ibm.com/namespace/autonomic/Tivoli_componentTypes"/>
<situation
categoryName="ReportSituation">
<situationType
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="ReportSituation"
reasoningScope="INTERNAL"
reportCategory="SECURITY"/>
</situation>
</CommonBaseEvent>