ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
Wrong and incorrect Event Time is displayed in audit probe GUI
Cause
Data conversion issue in between UIM database and audit probe.
Environment
This issue is confirmed in any version of audit probe with the following senario.
- UIM database is Oracle. - NLS_LANGUAGE and NLS_TERRITORY are set to regional value, such as Japanese/Japan.
(*) The following query help to verify : select value from v$parameter where name = 'nls_language'; select value from v$parameter where name = 'nls_territory';
Resolution
Please create the following trigger for UIM database schema. This trigger dynamically alters NLS values for only audit probe session, which resolves data conversion issue.
(*) sample file (audit_probe_incorrect_event_time.sql) attached to the case.
********************************************************************************************* create or replace trigger T00258961 after logon on database declare probe_name varchar2(100); begin select program into probe_name from v$session where audsid=userenv('sessionid');
if (probe_name like '%audit%') then execute immediate 'ALTER SESSION SET NLS_LANGUAGE=AMERICAN'; execute immediate 'ALTER SESSION SET NLS_TERRITORY=AMERICA'; end if; end; / *********************************************************************************************