Configuration Guide › Auditing an Identity Manager Environment › How to Configure Auditing › Audit Settings File › AuditEvent Element

AuditEvent Element

Audit Event elements specify events to audit. For a list of Identity Manager events, see the Administration Guide.

The AuditEvent element may contain multiple AuditProfile and AuditProfileAttribute elements. The database stores member, administrator, and owner policies in compiled XML format. This format is different from the user interface where each policy appears as an expression element.

The AuditEvent element includes the following parameters:

• name

  Defines the name of the event to audit.

  To audit or exclude an attribute for all events, specify ALL for the event name. For example, to prevent passwords from being audited, regardless of the event, specify the following:

  <AuditEvent name="ALL" auditlevel="">
    <AuditProfile objecttype="User"      auditlevel="">
    <AuditProfileAttribute name="%PASSWORD%" auditlevel="NONE"/>
  </AuditProfile>
  </AuditEvent>
  

• enabled

  Determines whether the event is audited. The valid values are as follows:

  • True indicates that Identity Manager audits this event
  • False indicates that Identity Manager does not audit this event.

  Note: Use lowercase letters when you specify true or false.

• auditlevel

  Indicates the type of information recorded for an attribute in the audit event.

  AuditLevel Values lists the valid values for the AuditLevel element.

  Note: Settings in the AuditProfile and AuditProfileAttribute elements take precedence over global settings in the AuditEvent element.