Analyze transactions report "Details" screen shows error in Admin console for Risk Authentication

Products

• CA Advanced Authentication
• CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort)
• CA Risk Authentication

Issue/Introduction

I cannot find old transaction details in "Analyze transaction report". When I click "details" link, it only works for the current day, but not for date older than one. I am not sure if it is related to Audit logs Archive table because log is only keeping one day record and move history logs to Archive table but the search should have found the record from Archive tables too.

Environment

Release : 9.1

Risk Authentication

Database: Oracle with Golden Gate replication

Cause

ARRFSYSAUDITLOG_AR table had duplicate records so when we click on DETAILS screen for older than a day transaction, the query was failing because of duplicate records from Archive table.

Resolution

With version 9.1 of Advanced Authentication there were some design changes made into the product like the Audit tables ( e.g. ARRFSYSAUDITLOG) will just contain a day worth of data and rest of the data will be moved every night to Audit Archive tables ( e.g. ARRFSYSAUDITLOG_AR) . Settings to configure the frequency of this data move is explained in detail here.

The error was observed in the scenario where Golden gate replication was enabled and the environment had Multiple Admin console servers ( Database Trim job is moved to Admin console Server ) from UDS now. Both the Admin console servers were enabled for the DB trim and it was running the DB trim process at the same time. The replication was replicating the data to the Archive tables ( Archive tables does not have Primary key defined for certain reasons to increase Performance) with duplicate entries.

Solution is to only enable the DB trim process from a single Admin console server and disable it from any other, The following setting should be set to false in ARCOT_HOME/conf/dbtrim.properties file

Enabled_Audit_Trim = false

 

Any changes in the dbtrim.properties file gets auto reloaded every 6 hours and that is controlled by the property PollTime (Specifies the time interval to reload the dbtrim.properties file for any change in parameter values. Default: 21600 seconds (six hours)).