Examples
The following examples describe a standard usage of the auditing feature.
In the following example, user root successfully
retrieves the definition of a job named MyTestJob using the jobstore command.
<CommonBaseEvent
creationTime="2007-06-21T16:05:19.455Z"
extensionName="TDWB_JOB_AUDIT_EVENT"
globalInstanceId="CE8F5E102AE3419AF7A1DC201135463A40"
sequenceNumber="188"
version="1.0.1">
<extendedDataElements
name="userInfoList"
type="noValue">
<children
name="userInfo"
type="string">
<values>root</values>
</children>
</extendedDataElements>
<extendedDataElements
name="action"
type="string">
<values>get</values>
</extendedDataElements>
<extendedDataElements
name="outcome"
type="noValue">
<children
name="result"
type="string">
<values>SUCCESSFUL</values>
</children>
</extendedDataElements>
<extendedDataElements
name="objectInfoList"
type="noValue">
<children
name="objectInfo"
type="noValue">
<children
name="objectClass"
type="string">
<values>Job</values>
</children>
<children
name="objectName"
type="string">
<values>MyTestJob</values>
</children>
<children
name="objectIdentifier"
type="string">
<values>3ebf6d62-0b83-3270-9b83-83c393e9cbca</values>
</children>
<children
name="objectSubmitterType"
type="string">
<values>TDWB CLI</values>
</children>
</children>
</extendedDataElements>
<extendedDataElements
name="CommonBaseEventLogRecord:sequenceNumber"
type="long">
<values>80808</values>
</extendedDataElements>
<extendedDataElements
name="CommonBaseEventLogRecord:threadID"
type="int">
<values>280</values>
</extendedDataElements>
<sourceComponentId
application="JobManagement"
component="None"
componentIdType="Application"
location="tdws08"
locationType="Hostname"
subComponent="None"
threadId="Default : 84"
componentType="http://www.ibm.com/namespace/autonomic/Tivoli_componentTypes"/>
<situation
categoryName="ReportSituation">
<situationType
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="ReportSituation"
reasoningScope="INTERNAL"
reportCategory="SECURITY"/>
</situation>
</CommonBaseEvent>In the following example, user testuser tries
deleting a job instance named MySecondJob using the appropriate
command line. The operation fails because the job was submitted by
another user. Deleting jobs submitted by other users requires Operator or Administrator rights.
For more information on access rights, see HCL Workload Automation:
Scheduling Workload Dynamically or HCL Workload Automation:
Administration Guide.
<CommonBaseEvent
creationTime="2007-06-21T16:05:32.746Z"
extensionName="TDWB_JOB_AUDIT_EVENT"
globalInstanceId="CE8F5E102AE3419AF7A1DC20113D32BB20"
sequenceNumber="189"
version="1.0.1">
<extendedDataElements
name="userInfoList"
type="noValue">
<children
name="userInfo"
type="string">
<values>testuser</values>
</children>
</extendedDataElements>
<extendedDataElements
name="action"
type="string">
<values>cancel</values>
</extendedDataElements>
<extendedDataElements
name="outcome"
type="noValue">
<children
name="result"
type="string">
<values>UNSUCCESSFUL</values>
</children>
<children
name="failureReason"
type="string">
<values>userNotAuthorized</values>
</children>
</extendedDataElements>
<extendedDataElements
name="objectInfoList"
type="noValue">
<children
name="objectInfo"
type="noValue">
<children
name="objectClass"
type="string">
<values>Job</values>
</children>
<children
name="objectName"
type="string">
<values>MySecondJob</values>
</children>
<children
name="objectIdentifier"
type="string">
<values>a05732c8-c008-3103-afd1-84b567d78de7</values>
</children>
<children
name="objectSubmitterType"
type="string">
<values>TDWB CLI</values>
</children>
</children>
</extendedDataElements>
<extendedDataElements
name="CommonBaseEventLogRecord:sequenceNumber"
type="long">
<values>80964</values>
</extendedDataElements>
<extendedDataElements
name="CommonBaseEventLogRecord:threadID"
type="int">
<values>292</values>
</extendedDataElements>
<sourceComponentId
application="JobManagement"
component="None"
componentIdType="Application"
location="tdws08"
locationType="Hostname"
subComponent="None"
threadId="Default : 91"
componentType="http://www.ibm.com/namespace/autonomic/Tivoli_componentTypes"/>
<situation
categoryName="ReportSituation">
<situationType
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="ReportSituation"
reasoningScope="INTERNAL"
reportCategory="SECURITY"/>
</situation>
</CommonBaseEvent>