Installation and Upgrade Guides › Policy Server Installation Guide › Configuring CA SiteMinder® Data Stores in a Relational Database › How to Store Audit Logs in MySQL

How to Store Audit Logs in MySQL

Complete the following procedures to configure MySQL as a standalone audit log store:

1. Be sure that MySQL is installed using the default character set (Latin1). If MySQL was not installed using the default character set, reinstall MySQL before configuring the CA SiteMinder® data store.
2. Gather database information.
3. Create the audit log schema.
4. Configure a MySQL data source for CA SiteMinder®.
5. Point the Policy Server to the database.
6. Restart the Policy Server.

More information:

Gather Database Information

Configure a MySQL Data Source for CA SiteMinder®

Create the Audit Log Schema

You create the audit log schema so the MySQL database can store audit logs.

Follow these steps:

1. Log in to the Policy Server host system.
2. Navigate to the following location:

   siteminder_home\db\tier2\MySQL.
   

   siteminder_home

   Specifies the Policy Server installation path.

3. Open the following file in a text editor:

   sm_mysql_logs.sql
   

4. Locate the following lines:

   DROP FUNCTION IF EXISTS `databaseName`.`getdate` $$
   CREATE FUNCTION `databaseName`.`getdate` () RETURNS DATE
   

5. Replace each instance of 'databaseName' with the name of the database functioning as the audit store.
6. Copy the contents of the entire file.
7. Paste the file contents into a query and execute the query.

   The audit store schema is created.

Point the Policy Server to the Database

You point the Policy Server to the database so the Policy Server can read and store audit logs.

To point the Policy Server to the data store

1. Open the Policy Server Management Console, and click the Data tab.

   Database settings appear.

2. Select ODBC from the Storage list.

   ODBC settings appear.

3. Select Audit Logs from the Database list.
4. Select ODBC from the Storage list.

   Data source settings become active.

5. Enter the name of the data source in the Data Source Information field.
   • (Windows) this entry must match the name you entered in the Data Source Name field when you created the data source.
   • (UNIX) this entry must match the first line of the data source entry in the system_odbc.ini file. By default, the first line in the file is [CA SiteMinder® Data Sources]. If you modified the first entry, be sure that you enter the correct value.
6. Enter and confirm the user name and password of the database account that has full access rights to the database instance in the respective fields.
7. Specify the maximum number of database connections allocated to CA SiteMinder®.

   Note: We recommend retaining the default for best performance.

8. Click Apply.

   The settings are saved.

9. Click Test Connection.

   SiteMinder returns a confirmation that the Policy Server can access the data store.

10. Click OK.

    The Policy Server is configured to use the database as an audit logging database.

Restart the Policy Server

You restart the Policy Server for certain settings to take effect.

Follow these steps:

1. Open the Policy Server Management Console.
2. Click the Status tab, and click Stop in the Policy Server group box.

   The Policy Server stops as indicated by the red stoplight.

3. Click Start.

   The Policy Server starts as indicated by the green stoplight.

   Note: On UNIX or Linux operating environments, you can also execute the stop-all command followed by the start-all command to restart the Policy Server. These commands provide an alternative to the Policy Server Management Console.