EVENT DRIVEN AUDIT LOGGING

• US 20110035242A1
• Filed: 08/07/2009
• Published: 02/10/2011
• Est. Priority Date: 08/07/2009
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Bellur, Shashidar, Thomas, Santhosh, Sondhi, Bhupinder
• Granted Patent: US 8,204,861 B2
• Time in Patent Office: Days
• US Class Current: 705/7
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 10/063 Operations research, analysis or management
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes

Abstract

This disclosure describes, generally, methods and systems for implementing event driven audit logging. The method includes establishing, at an audit logging system, audit logging framework configured to provide application independent connectivity and further configured to provide event driven audit logging. The method further includes receiving, at the audit logging system, a selection of an application to provide event driven auditing, enabling event driven auditing for the selected application, and receiving a selection of event types to enable for auditing by the audit logging framework. Furthermore, the method includes based on the selected event types, tracking the application actions associated with the selected events, creating an event log for the application, and providing access to the event log.

Claims

1. A method of implementing event driven audit logging, the method comprising:

establishing, at an audit logging system, audit logging framework configured to provide application independent connectivity and further configured to provide event driven audit logging;

receiving, at the audit logging system, a selection of an application to provide event driven auditing;

enabling event driven auditing for the selected application;

receiving a selection of event types to enable for auditing by the audit logging framework;

based on the selected event types, tracking the application actions associated with the selected events;

creating an event log for the application; and

providing access to the event log.

2. The method of claim 1, wherein the event types comprise one or more of the following:

creation, deletion, update, submission for approval, approval, overwrite, post, cancellation, confirmation, and resubmit.

3. The method of claim 1, wherein an application comprises a document.

4. The method of claim 3, wherein a document comprises one or more of the following:

a voucher, a deposit, and a payment.

5. The method of claim 1, further comprising maintaining a plurality of framework tables.

6. The method of claim 5, wherein the plurality of framework tables comprise entries configured to indicate applications utilizing the audit logging framework.

7. The method of claim 6, further comprising receiving a new application framework table for a new application to utilize the audit logging framework.

8. The method of claim 7, wherein the new application framework comprises a plurality of parameters associated with the auditing of the new application.

9. The method of claim 8, wherein the plurality of parameters comprise one or more event types to track for the new application.

10. The method of claim 1, further comprising storing the event log.

11. The method of claim 1, further comprising providing a user interface (UI) configured to receive input for modifying the event types and to display audit logs.

12. The method of claim 1, wherein the application is an enterprise application.

13. The method of claim 1, wherein the application is a product or service.

14. The method of claim 1, further comprising registering the application with the audit logging system.

15. The method of claim 1, further comprising based on activation of a purge function, purging the audit log.

16. A machine-readable medium having sets of instructions stored thereon for implementing event driven audit logging which, when executed by a machine, cause the machine to:

establish an audit logging framework configured to provide application independent connectivity and further configured to provide event driven audit logging;

receive a selection of an application to provide event driven auditing;

enable event driven auditing for the selected application;

receive a selection of event types to enable for auditing by the audit logging framework;

based on the selected event types, track the application actions associated with the selected events;

create an event log for the application; and

provide access to the event log.

17. The machine-readable medium of claim 16, wherein the sets of instructions, when further executed by the machine, cause the machine to maintain a plurality of framework tables.

18. The machine-readable medium of claim 17, wherein the plurality of framework tables comprise entries configured to indicate applications utilizing the audit logging framework.

19. The machine-readable medium of claim 18, wherein the sets of instructions, when further executed by the machine, cause the machine to receive a new application framework table for a new application to utilize the audit logging framework.

20. The machine-readable medium of claim 19, wherein the new application framework comprises a plurality of parameters associated with the auditing of the new application.