How to read all records in sys.AUD$ table with Oracle iRecorder again

Products

• CA Security Command Center
• CA Data Protection (DataMinder)
• CA User Activity Reporting

Issue/Introduction

Description:

Here is the steps for reading all records in sys.AUD$ table with Oracle iRecorder again.

Solution:

Oracle iRecorder checks the value of NTIMESTAPM# field in sys.AUD$ table and the iRecorder judges if the records should be read.

For example:

There are 5 records in sys.AUD$ table as follows.

NTIMESTAMP#
11-09-20 02:50:41.375000
11-09-27 04:34:12.265000
11-09-27 04:42:24.843000
11-09-27 04:48:05.671000
11-09-27 04:58:55.843000

1. Please stop iGateway service.
   
   
2. Please check Oracle.conf file in SharedComponents\iTechnology folder.
   
   The .conf file has the following line.
   
   <LastRecordRead NSN="XXX" Table="sys.aud$">MM/DD/YYYY HH24:MI:SS.EF6</LastRecordRead>
   
   
3. Here is the steps for reading all records in sys.AUD$ table with Oracle iRecorder again.
   
   Please set LastRecordRead the date and time before 11-09-20 02:50:41.375000 as follows.
   
   LastRecordRead NSN="XXX" Table="sys.aud$">01/01/1980 00:00:00.000000</LastRecordRead>
   
   That means that the Oracle iRecorder will try and read data from after Jan 1st 1980.
   
   *The date format in LastRecordRead is MM/DD/YYYY.
   
   
4. Please start iGateway service.

Oracle iRecorder should read all records in sys.AUD$ table.

Environment

Release:
Component: ADTCTL