TM1 ver 9.1.x (and below) Audit log

Post Reply
gabi
Posts: 20
Joined: Thu Jun 19, 2008 12:44 pm

TM1 ver 9.1.x (and below) Audit log

Post by gabi » Wed May 13, 2009 6:04 pm

Hello all,

I'm wondering if there is any workaround/solution to audit user activities (especially user logon/logoff) on TM1 ver. 9.1.x. (requested by Information Security)
I have few directions and I'll appreciate your advice:
1. Use TM1 performance monitor and export relevant user information to flat file (I'm not sure if user logon/logoff is logged - I just found logging of number of connected users.
2. Dig users status changes from the transaction log.
3. Use TM1 performance counters (Windows performance monitor) to log user activities.
{I had a problem to find 'Applix TM1' (TM1 9.1.4) or 'IBM cognos TM1' (TM1 9.4.1) object counters in the Windows perfmon - even after manually registered the TM1perfmondll.dll and restart TM1)

Thnk you,
Gabi

User avatar
George Regateiro
MVP
Posts: 326
Joined: Fri May 16, 2008 3:35 pm
OLAP Product: TM1
Version: 10.1.1
Excel Version: 2007 SP3
Location: Tampa FL USA

Re: TM1 ver 9.1.x (and below) Audit log

Post by George Regateiro » Wed May 13, 2009 7:31 pm

Though it will not get you 100% acurate information (we use it for tracking usage trends and not specific logins), we use the .net API and have a scheduled executable that pulls a listing of the users. It is a failry quick login, return the users to an array list and logout so there is not a huge impact on the system. Since it is scheduled we do not capture all the data, but trends are good with us.

gabi
Posts: 20
Joined: Thu Jun 19, 2008 12:44 pm

Re: TM1 ver 9.1.x (and below) Audit log

Post by gabi » Sun May 17, 2009 9:50 am

Thank you for your reply, George

Guys,
Any other idea to track users login to TM1 on ver 9.1.x?

Thank you,
Gabi

User avatar
Steve Rowe
Site Admin
Posts: 1920
Joined: Wed May 14, 2008 4:25 pm
OLAP Product: TM1
Version: 10.2.2., PAW
Excel Version: Nearly all of them

Re: TM1 ver 9.1.x (and below) Audit log

Post by Steve Rowe » Mon May 18, 2009 8:13 am

I've not tested this but could you turn logging on for the client properties cube and then query the TM1 logs for changes to this cube. This should show log in activity
Cheers

User avatar
Steve Vincent
Site Admin
Posts: 1050
Joined: Mon May 12, 2008 8:33 am
OLAP Product: TM1
Version: 10.2.2 FP1
Excel Version: 2010
Location: UK

Re: TM1 ver 9.1.x (and below) Audit log

Post by Steve Vincent » Mon May 18, 2009 9:39 am

Steve Rowe wrote:I've not tested this but could you turn logging on for the client properties cube and then query the TM1 logs for changes to this cube. This should show log in activity
Cheers
Afraid not, Cognos broke that in 9.1 with the changes to the licensing and a brief test in 9.4 didn't show it to be fixed either. I use that method in 9.0 to track usage in a cube and it works a charm, but it seriously needs fixing by Cognos if we are ever to accurately track usage.
If this were a dictatorship, it would be a heck of a lot easier, just so long as I'm the dictator.
Production: TM1 64 bit 10.2.2, Windows 2008/2012 Server. Excel 2010, IE11 for t'internet

lotsaram
MVP
Posts: 3251
Joined: Fri Mar 13, 2009 11:14 am
OLAP Product: TableManager1
Version: PA 2.0.x
Excel Version: Office 365
Location: Switzerland

Re: TM1 ver 9.1.x (and below) Audit log

Post by lotsaram » Mon May 18, 2009 11:38 am

Actually, it is truly broken only in 9.1.3. In 9.1.4 they introduced ClientPropertiesSyncInterval to the tm1s.cfg file. Including this parameter in the config file starts a housekeeper thread that wakes at an interval of seconds specified by the parameter. i.e. ClientPropertiesSyncInterval=120 will mean the thread wakes every 2 minutes and writes "ACTIVE" or "" to the }ClientProperties cube.

This is in the 9.1 SP4 release notes. Although absent from 9.4 documentation this parameter setting also works in 9.4. Also little known is that this is an "active parameter," if the parameter value is changed while the server is running this will alter the frequency with which client status is logged.

Andy Key
MVP
Posts: 340
Joined: Wed May 14, 2008 1:37 pm
OLAP Product: TM1 CX
Version: 2-5 to 10-2-x
Excel Version: 2003 2007 2010 2013
Location: Sydney
Contact:

Re: TM1 ver 9.1.x (and below) Audit log

Post by Andy Key » Mon May 18, 2009 1:16 pm

ClientPropertiesSyncInterval is mentioned in the 9.4 MR1 FP1 release notes. Give them another couple of releases and it will find its way into the main docs...
Andy Key

aanensonex
Posts: 1
Joined: Thu Jun 18, 2009 8:00 am
Version: TECH ON
Excel Version: WINDOW

Re: TM1 ver 9.1.x (and below) Audit log

Post by aanensonex » Sat Jun 20, 2009 6:07 am

I need help with db auditing models. How do I approach the problem below? Your company received a request from its most important partner to comply with industry standards, which requires an audit trail of all financial data. Your manager summoned you to her office, explaining this new requirement and assigning you to design the architecture and a high-level auditing model. Compliance requires that all data changes be recorded in the history tables and that the auditing model employ a mechanism to audit any user on demand.
__________________
market samurai ~ marketsamurai ~ marketsamurai.com

Post Reply