In my last post we covered the four tables used to hold the audit events and their details. In a very simple deployment this would potentially be all you would need to report on simple audit data. More complex deployments however often have multiple instances of services running across multiple servers.

The final two tables in the schema are the SERVER_PROCESS and the APPLICATION_TYPE tables. The SERVER_PROCESS table contains auditee information; the services generating auditing events. The APPLICATION_TYPE is the lookup table for the services (the application types).  These two tables are simply joined on the Application _Type_ID and then joined to the AUDIT_EVENT table by the Server_CUID.

Starting on page 595 of the ‘Business Objects Enterprise Administrators Guide' is a detailed reference of all the audit database tables. This also contains information on the types of events that each service (auditee) can generate.

Again, using my favorite BI tool here is an example of my Deski server activities for a particular user.