Default Auditing Rules

Redwood makes a number of popular auditing rules available in the form of two CAR files. There is a CAR file for your Development environment and a CAR file for your Production environment. The rules in these CAR files are listed below.

To download these CAR files:

  1. Navigate to Configuration > Software.

  2. Locate the Download CAR Files section.

  3. Right-cick the name of the CAR file you want to download and choose Download.

    • Development: audit-rules-app-development.car

    • Production: audit-rules-app-production.car

  4. Install the CAR file as described in Importing Objects.

Development Rules

All major top-level objects are audited at the Full Audit level.

  • Development_AdHocAlertSource_FullAudit
  • Development_AlertEscalation_FullAudit
  • Development_Application_FullAudit
  • Development_Document_FullAudit
  • Development_EventDefinition_FullAudit
  • Development_ExtensionPoint_FullAudit
  • Development_Format_FullAudit
  • Development_ImportRuleSet_FullAudit
  • Development_JobDefinition_FullAudit
  • Development_JobDefinitionAlertSource_FullAudit
  • Development_JobLock_FullAudit
  • Development_Library_FullAudit
  • Development_MonitorAlertSource_FullAudit
  • Development_PeriodFunction_FullAudit
  • Development_ProcessMonitorDefinition_FullAudit
  • Development_Queue_FullAudit
  • Development_Resource_FullAudit
  • Development_SubmitFrame_FullAudit
  • Development_Table_FullAudit
  • Development_TableDefinition_FullAudit
  • Development_TimeWindow_FullAudit
  • Development_Trigger_FullAudit
  • Development_UserMessageDefinition_FullAudit

Production Rules

All major top-level objects are audited at the Full Audit level. Some objects are audited at the Diff Only level (most notably SubjectObjectPrivilegeGrant and SubjectObjectTypePrivilegeGrant, which allow you to see which grants have been given to individual users or roles).

  • Production_AdHocAlertSource_FullAudit
  • Production_AlertEscalation_FullAudit
  • Production_Application_FullAudit
  • Production_CredentialProtocol_DiffOnly
  • Production_Document_FullAudit
  • Production_EmailAlertGateway_DiffOnly
  • Production_Event_DiffOnly
  • Production_EventDefinition_FullAudit
  • Production_ExportRuleSet_DiffOnly
  • Production_ExtensionPoint_FullAudit
  • Production_Format_FullAudit
  • Production_ImportRuleSet_FullAudit
  • Production_Job_DiffOnly
  • Production_JobDefinition_FullAudit
  • Production_JobDefinitionAlertSource_FullAudit
  • Production_JobLock_FullAudit
  • Production_Library_FullAudit
  • Production_MonitorAlertSource_FullAudit
  • Production_NavigationBar_DiffOnly
  • Production_ObjectSearch_DiffOnly
  • Production_OraAppsSystem_DiffOnly
  • Production_OraOhiSystem_DiffOnly
  • Production_PeopleSoftSystem_DiffOnly
  • Production_PeriodFunction_FullAudit
  • Production_ProcessMonitor_DiffOnly
  • Production_ProcessMonitorDefinition_FullAudit
  • Production_ProcessServer_DiffOnly
  • Production_ProcessServerAlertSource_DiffOnly
  • Production_Queue_FullAudit
  • Production_R2WCatalog_DiffOnly
  • Production_RemoteSystem_DiffOnly
  • Production_Resource_FullAudit
  • Production_SAPBAEConnector_DiffOnly
  • Production_SAPSystem_DiffOnly
  • Production_SubjectObjectPrivilegeGrant_DiffOnly
  • Production_SubjectObjectTypePrivilegeGrant_DiffOnly
  • Production_SubmitFrame_FullAudit
  • Production_Table_FullAudit
  • Production_TableDefinition_FullAudit
  • Production_TimeWindow_FullAudit
  • Production_Trigger_FullAudit
  • Production_UserMessageDefinition_FullAudit