3 Replies Latest reply on Jan 18, 2017 11:17 AM by Pravin Takpire

    User Transaction Logs

    Shareef Khaleel

      Dear All,

       

      Our internal auditors recommends to log all user transactions; not only who created the record and last update by; every single transaction he made, all records he viewed, etc; for example:

      Login; logout; responsibilities and forms in these responsibilities; what records he viewed, created, updated, deleted....etc.

       

      Reading following link:

      https://docs.oracle.com/cd/A60725_05/html/comnls/us/fnd/sonaud01.htm

      answers most of my questions; but i didn't find if it is cover logging at record level (Viewing, updating, deleting..);

       

       

      We are using ORACLE EBS R12.1.2, DB: 11.1.0.7.

       

      Thanks in advance,

      Shareef

        • 1. Re: User Transaction Logs
          John_K

          Hi,

          I think you need to have a good word with your auditors as that is ridiculous. Sure you can set up sign-on audit (and many organizations do), you can use AuditTrail functionality to monitor changes to key tables, you can even enable auditing at the database level (if you're licensed).

          However auditing every record viewed??? That is just beyond crazy. Sure it's possible, however prepare for your database to grow massively and performance to fall massively. Even auditing update/deletes on every table is nonsensical - the overhead of managing such a system would be almost impossible in my opinion. You might be able to do it on a basic custom system, or on a few tables (such as personal information) however globally on E-Business Suite?? Your auditors need a reality check.

          1 person found this helpful
          • 2. Re: User Transaction Logs
            Shareef Khaleel

            Hi,

             

            You suggest to enable audit only on critical tables in each module; for example: receipts, payments, Journals and enable logging for login, logout and responsibilities at user level.

             

            Any how, performance wise is a big issue, many transactions and many audit tables.

             

            Thanks and Regards,

            Shareef

            • 3. Re: User Transaction Logs
              Pravin Takpire

              Auditors do demand crazy features to be implemented. Please check with auditors which regulation/rule asks to audit everything. I think no single regulation asks to audit complete activity.

              regards

              Pravin

              1 person found this helpful