Who Decommissioned My Enterprise Manager Agent?
I prefer to write blog posts about the interesting questions on OTN. This blog post is one of them. There are usually more than one EM admins managing the systems, and you may want to track other users’ activity. Enterprise Manager Cloud Control provides auditing mechanism called “comprehensive auditing”. It’s not enabled by default for all actions because it may consume a lot of disk space.
If you want to enable it for all actions, you should use “emcli” tool:
1 2 |
./emcli login -username=SYSMAN ./emcli enable_audit |
After you enable comprehensive auditing for all actions, you can go to “setup” >> “security” >> “audit data” to see all audited actions.
The audit data page, provides filtering on audit records so I can easily list who deleted a target from the system.