UIM : audit probe : Wrong Event Time in audit log

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

Wrong and incorrect Event Time is displayed in audit probe GUI

Environment

This issue is confirmed in any version of audit probe with the following senario.

- UIM database is Oracle.
- NLS_LANGUAGE and NLS_TERRITORY are set to regional value, such as Japanese/Japan.

(*) The following query help to verify :
select value from v$parameter where name = 'nls_language';
select value from v$parameter where name = 'nls_territory';

Cause

Data conversion issue in between UIM database and audit probe.

Resolution

Please create the following trigger for UIM database schema.
This trigger dynamically alters NLS values for only audit probe session, which resolves data conversion issue.

(*) sample file (audit_probe_incorrect_event_time.sql) attached to the case.


*********************************************************************************************
create or replace trigger T00258961 after logon on database
declare probe_name varchar2(100);
begin
   select program into probe_name
   from v$session where audsid=userenv('sessionid');
   
   if (probe_name like '%audit%') then
       execute immediate 'ALTER SESSION SET NLS_LANGUAGE=AMERICAN';
       execute immediate 'ALTER SESSION SET NLS_TERRITORY=AMERICA';
   end if;
end;
/
*********************************************************************************************