A20 Lesson 7 Enabling configuration logging in XenApp 6.5

If we would like to audit changes made to the farm database we can enable configuration logging in XenApp 6.5. This will require an additional database in Oracle or Microsoft SQL. For the video we will create a new database on our SQL express server. We will use the same account to access this configuration logging database as we used to access the farm database, although this is not required. We will then assign the _CTX account as a database user for the database and add it to the db_owner role. Additional it will need to be a user in the master database with SELECT on sys.users and sys.objects.

Database Permissions

To create log entries in the database tables

INSERT for the database tables
EXECUTE for the stored procedures
SELECT
SQL Server: for sysobjects and sysusers
Oracle: for sys.all_objects, and for sequence objects and the "create session" system privilege

To clear the log

DELETE/INSERT for the database tables
EXECUTE for the GetFarmData stored procedure
SELECT
SQL Server: for sysobjects and sysusers
Oracle: for sys.all_objects, and for sequence objects and the "create session" system privilege

To create a reportEXECUTE for the Configuration Logging stored procedures
SELECT
SQL Sever: for sysobjects and sysusers
Oracle: for sys.all_objects, and for sequence objects and the "create session" system privilege

With the database enables then we can return to AppCenter and the enable configuration logging via the farm properties accessed via the farm node in Appcenter.

When connection to the database we will not choose encryption unless we have previously enabled IMA encryption withing the farm with CTXKEYTOOL.EXE. If we had and we enabled encryption we would encrypt the credentials of the database user when connecting.

To view the log we can use the history node of AppCenter