Page Comparison

...

The AuditTrail service Audit Trail Service should have been running for enough time for the collector to have collected audittrail audit trail events from the components prior to the test.

WebGUI

• First verify that audittrail audit trail events has have been collected by expanding the the Show collection schedule panel.
• Verify that new audit trails are collected:

...

1. Configure the audit trail preservation to run once every 10 minutes other minute and set the log level to debug. Also configure the audit trail collect collection grace period so the collection never starts .(can't go above ~PT596H because of underlying conversion to int → overflow)

   Code Block
   <AuditTrailServiceSettings> ... <GracePeriod>99999999999<<GracePeriod>PT500H</GracePeriod> <AuditTrailPreservation> <AuditTrailPreservationInterval>6000<<AuditTrailPreservationInterval>PT2M</AuditTrailPreservationInterval> .... </AuditTrailPreservation>

   
   

2. Clear the (audit trail service) database.
3. Restart the tomcat
4. Look in the audit trail service log to verify that:
   
   1. The audit trail preservation is scheduled to run every other minute
   2. The first preservation run should start quickly.
   3. The preservation should finish quickly packing 0 audit trails (no audits have been collected yet).
   4. All collections are preserved
5. Start the collection of audit trails.
6. Look in the audit trail service log to verify that:
   
   1. Some audit trail trails have been collected prior to the preserver running.
   2. The preserver start starts as scheduled.
   3. A number of audit trail are packed and ingested.
   4. The contents of the packed  audit trail files are correct.