Description: Find all usernames accessing KFS and KR tables with PII data that has an action other than select. Only six-months worth of data is kept in the audit table.
Frequency: Monthly (usually third Thursday of the month)
KFS tables that are audited include the following:
AR_CUST_T
CHECK_RECONCILIATION_T
FP_BANK_T
FP_DV_WIRE_TRNFR_T
FP_PRCRMNT_CARD_HLDR_DTL_T
FP_PRCRMNT_CARD_HLDR_T
FP_PRCRMNT_CARD_TRN_MT
FP_PRCRMNT_CARD_TRN_T
FS_PMT_SRC_WIRE_TRNFR_T
PDP_ACH_ACCT_NBR_T
PDP_PAYEE_ACH_ACCT_T
PUR_VNDR_HDR_T
PUR_VNDR_TAX_CHG_T
TAX_PAYEE_T
UCONN_PMW_VENDOR_T
KR tables audited include the following:
KREW_DOC_HDR_CNTNT_T
KRNS_MAINT_DOC_T
OLD_KREW_DOC_HDR_CNTNT_T
View:
AUDIT_TRAIL
| Column Name | Length | Sample Data |
|---|---|---|
| OS_USERNAME | 255 | tomcat kfsctmuser iadmin ucdstage dsadm root btp98001 kec14023 kaa02003 |
| USERNAME | 30 | KR_PRD KFS_PRD ACH_UAT_USR_RO KFS_PRD_ETL_RO RSMART_RO KFS_PRD_FOC_RO BTP98001 KEC14023 KAA02003 |
| USERHOST | 128 | dsprod webfocusprod dsdev webfocusdev HZMW5S1 BZ1NBP1 9HDKVV1 UCONN\HZMW5S1 kfs20.uits.uconn.edu |
| TIMESTAMP | 19 | |
| OWNER | 30 | KFS_PRD KR_PRD |
| OBJ_NAME | 128 | AR_CUST_T
|
| ACTION_NAME | 28 | UPDATE INSERT DELETE SELECT |
Current Query used -
select distinct USERNAME, current_timestamp
from audit_trail
where ACTION_NAME <> 'SELECT';
Results by year: