The Audit Log Adapter uses the audit_table.conf configuration file. This configuration file includes the following four tables:

  • IgnoreActionTable—This table contains actions which may be included in the raw output but correspond to functions which are not modifications. Actions in this table are not written to the final output file. For example, invokeOperation ICS_ActionManager ICS-ActionManager getClientActions is written to the raw output file. All calls to invokeOperation are written to the raw output file, but some of these calls correspond to operations which do not modify anything. The getClientActions does not modify anything. Therefore, this is included in the IgnoreActionsTable. Anything in this table is not written to the final output file.

  • SingleActionTable—This table maps actions from the raw output to the improved text in the final audit log output. This information directs the audit log adapter on how to format the final audit log output.

  • ActionSequenceTable—This table includes sequences of actions that correspond to one logical output action.

  • MultiInProgressTable—This table is used internally to track multi-action sequences that are currently in progress. It should not be modified.

    An example of the table entries that are displayed in the audit_table.conf file is shown in Sample Entries in the audit_table.conf File.

    Figure 1. Sample Entries in the audit_table.conf File