Topics Topics


How to configure a Database Monitor

You can keep track of all databases changes (document, design and ACL changes) by using the Database Monitor function of SecurTracTM. To configure the Database Monitor, you need to open the SecurTrac Configuration Database (SCTCFG.NSF)

How to create a SecurTrac Database Monitor:

  1. Open the SecurTrac Configuration Database (SCTCFG.NSF).
  2. In the left side pane, select .
  3. Click the button on the action bar.
  4. Specify the preferred configuration settings and click the button.
  5. Below is a table describing each of the available configurations within the Database Monitor.


Basics Tab:

SectionFieldDescription
Database To MonitorFile/Folder NameSpecify the relative path and file name of the database to be monitored. For example:

To monitor the SecurTrac Configuration database, you should enter "SECURTRAC\SCTCFG.NSF".
To monitor all databases in a folder, you should enter the folder name. e.g. apps
To monitor all databases, you should enter "*".

Note: This field does not support multiple values. If you want to monitor multiple specific databases, please use multiple Database Monitors instead.
Exclude File(s)/Folder name(s)Valid when * or a folder name is specified as the File/Folder name to monitor. e.g. * or apps. Use this field to specify the files and/or folder names to exclude from monitoring. Specifying multiple values is supported. Separate each value with a semi colon. e.g. finance.nsf;apps\*
The root data folder can be included or excluded from monitoring by using the <DataRoot> parameter.
Server(s)Either select "All in the Domain" or "Only the following" servers.

If you select "All in the Domain", databases on all servers in the current domain that match the specified criteria(folder or file name) will be monitored by SecurTracTM.

If you select "Only the following", a list box will be shown for you to select the specific server(s) in the current domain to be monitored. Click on the button to choose the server(s) you want to monitor.

People to MonitorPeopleSpecify the user(s) who's actions should be monitored in the specified database(s). Separate multiple names with commas or semicolons. To specify all members of a branch of a hierarchical name tree, enter a wild card (*) followed by a forward slash and certifier name; for example, */SALES/ACME. To monitor all users, enter "*".

Note: Groups can also be specified in this field.

AND the people are using Full Access Administration privilege.When this option is selected, only when the people/groups specified in the "People" field ALSO have the Full Access Administration privilege activated, will this monitor be triggered.
DescriptionDescriptionThis is an optional field which allows user to input descriptions or remark for this monitor.
Log DatabaseFile nameSelect

Log to the default databaseThe corresponding log will be stored in a Central Log Database (SctLog.nsf).
Log to the specified databaseThe corresponding log will be stored in the database you specified.
Server nameSelect

Log to the server where the event occurredThe corresponding log will be created on the same server where the event occurred.

Log to the specified server
The corresponding log will be created on the server you specified. If you select this option, please make sure the originating server has sufficient access to the remote log database on this specified server.
Multiple Monitors Matched HandlingSingle log entryThis is the default option. Select this option if you want SecurTracTM to generate one log entry only for all monitor(s) matched.
Multiple log entries Select this option if you want SecurTracTM to generate a new log entry for each monitor matched.
EnablementDisable this Database MonitorIf this field is checked, SecurTracTM will temporarily disable that specific Database Monitor and no configured events within that Database Monitor document will be logged.


Monitor --> Document Tab:

Remark: 'The Database' refers to the database specified in 'Database to Monitor' section under 'Basics' view.

SectionFieldDescription
ActionOpenSelect this option to monitor any events of document opened in the Database.
CreateSelect this option to monitor any document creation in the Database.
UpdateSelect this option to monitor any document updates in the Database.
DeleteSelect this option to monitor any document deletions in the Database.
Criteria to match: Formula EditorLog if formula is trueSpecify criteria for database monitoring. You should enter Notes @formula whose return value must be either TRUE or FALSE. For example, you can add ' Form="Salary" ' to monitor only Salary documents.
Note:
  1. If the action is Update, the formula is run against the original document, not the "to-be-saved" document.
  2. Refer to Building Sophisticated Criteria sectionDatabase 'SecurTrac Admin Guide', View 'd. Printed Book', Document 'Building more sophisticated Criteria' for advanced Formula settings.
Criteria to match: Formula WizardLog if these conditions are metUsing the new Formula Wizard, now you can easily create criteria to match, with no need to have programming experience. With its intuitive interface, you can easily select criteria conditions based on Sender, Body, Subject and more.
Criteria to match: Formula WizardShow formula generated by the Formula WizardNot selected by default and only visible when the Formula Wizard is used. When conditions are selected and applied using the Formula Wizard, a formula is automatically generated. Select this option to display the generated formula.
And the following fields are changedSelect this option if you are only interested in certain fields that have changed. A log will be generated when one of the specified fields is changed. In other words, if none of the specified fields are changed, a log will not be generated. This option applies to the Update action only.
ExceptionDon't generate log if the document is opened by current serverSelect this option to prevent logging if the document is opened by the current server.
Don't generate log if the action is triggered by replicationSelect this option to prevent logging if the action is triggered by replication.
Don't generate log if the action is triggered by the following tasksSelect this option to prevent logging if the action is triggered by specified tasks.
Don't generate log if the action is triggered by the following user(s) or group(s)Select this option to prevent logging if the action is triggered by specified user(s) or group(s)
Don't generate log if there is no change in field valuesSelect this option to prevent logging if there is no change in field values although an update action is detected. This option applies to Update action only.
Ignore changes to the following field(s)Select this option to prevent logging if changes only occurred in the specified fields.
Record Field(s)Field(s) to be shown in the header sectionSelected field(s) that will show as a header in the database monitor log. The values of the field(s) you have selected will be shown in each log. Write in the format FIELD NAME | DISPLAY NAME such that the optional DISPLAY NAME will appear as title instead of the FIELD NAME in the header section.
Additional fields to be loggedIf you select "Don't Log", no fields will be logged.

If you select "All fields", every field and its value will be shown in the log.

If you select "Modified fields", every modified field and its value will be shown in the log.

If you select "Specified fields", you will be able to specify the fields you want to SecurTrac to log.

Field(s) to be loggedUnless "Specified fields" is selected, this section will not be shown. Please specify all the fields you want to be logged by the database monitor.
Log internal $fieldsLog internal $fields of the document
RichText Field LoggingLog RichText FieldSelect this field if you want to log RichText Fields. The log will store the original value of the RichText field.
Note: You can log up to 5 RichText fields.
Attachment LoggingDon't LogSelect this option if you do not want to log file attachments.
Log Attachment(s) InfoSelect this option if you want to log the attachment info only, without capturing a copy of any file attachment(s).
Log Attachment(s) Info and ContentSelect this option if you want to log the attachment info as well as capturing a copy of any file attachment(s).
Notification ListMailing addressSelect the person who will receive an e-mail notification immediately when this event occurs.
ImportanceYou can set the importance of the e-mail notification.
Delivery Priority You can set the delivery priority of the e-mail notification.
Customize E-Mail Notification MessageSelect this option if you want to customize the subject and content of the e-mail notification message.
Add fieldAllows you to select predefined reserved fields.
Bulk Action DetectionEnable Bulk Action DetectionSelect this option to generate a Bulk Action Log if the defined events occurred a defined no. of times within a defined period.
Send e-mail notification toSelect the person(s) who will receive an e-mail notification immediately when there are events that match the defined bulk action criteria.
ImportanceYou can set the importance of the e-mail notification.
Delivery PriorityYou can set the delivery priority of the e-mail notification.
Customize E-Mail Notification MessageSelect this option if you want to customize the subject and content of the e-mail notification message.
Add fieldAllows you to select predefined reserved fields
Export Specified FieldsExport Specified FieldsSelect this option if you want to export the document fields (before and after values) to the log. Hence the values can be searched or exported for other application use.

For Create Action, the specified fields will be stored and the fields would be named as "SCTCF_fieldname" in the log.
For Delete Action, the specified fields will be stored and the fields would named as "SCTCF_fieldname" in the log.
For Update Action, the specified fields will be stored and the before-value fields would be named as "SCTPF_fieldname" and the after-value fields would be named as "SCTCF_fieldname" in the log.
The list of the specified fields will be stored as a "text list" in the field "ExportFieldList".

For example, if the affected document has a field named "salary" and the value has been changed from "1000" to "2000". The SecurTrac log will contain:
- a field named SCTPF_salary which stores the before-value "1000"
- a field named SCTCF_salary which stores the after-value "2000"
- a field named ExportFieldList which stores the field name "salary"
Export to Domino XML (DXL)Export the original document to DXLSelect this option if you want to enable the restore feature in SecurTrac. By enabling this option, SecurTrac will store the original document in DXL format whenever the document has been updated or deleted. In the Update/Delete log, there will be a "Restore" button to restore the document back to its previous version. Please note that the Notes client being used must at least be the same version or newer when compared the Domino server version. For example, a Notes 7 client will not be able to restore a document on a Domino 8 server.
Note: This option applies to the Update/Delete action only.
EnablementDisable monitoring document changeIf this field is checked, SecurTracTM will temporarily disable the monitoring of any document changes in the Database.


Monitor --> Design Tab:

SectionFieldDescription
Design ElementsSelect Design Elements to be loggedSelect this option to log "All" design elements or "specify" which design elements should be logged.
ExceptionIgnore Private View ChangeSelect this option to prevent logging of private View changes.
Ignore Private Agent ChangeSelect this option to prevent logging of changes to private Agents
Ignore Agent Data ChangeSelect this option to prevent logging of changes to shared Agents
Ignore Hidden File Resource ChangeSelect this option to prevent logging if a Hidden File Resource has changed.
Notification ListMailing addressSelect the person who will receive an e-mail notification immediately when this event occurs.
ImportanceYou can set the importance of the e-mail notification.
Delivery PriorityYou can set the delivery priority of the e-mail notification.
Customize E-Mail Notification MessageSelect this option if you want to customize the subject and content of the e-mail notification message.
Add fieldAllows you to select predefined reserved fields.
Bulk Action DetectionEnable Bulk Action DetectionSelect this option to generate a Bulk Action log if the defined events occurred a defined no. of times within a defined period.
Send e-mail notification toSelect the person(s) who will receive an e-mail notification immediately when there are events that match the defined bulk action criteria.
ImportanceYou can set the importance of the e-mail notification.
Delivery Priority You can set the delivery priority of the e-mail notification.
Customize E-Mail Notification MessageSelect this option if you want to customize the subject and content of the e-mail notification message.
Add fieldAllows you to select predefined reserved fields.
Export to XML(DXL)Export the original Design element to DXLSelect this option if you want to enable the restore feature in SecurTrac. By enabling this option, SecurTrac will store the original design element in DXL format whenever it has been updated or deleted. In the Update/Delete log, there will be a "Restore" button to restore the design element back to its previous version. Please note that the Notes client being used must at least be the same version or newer when compared the Domino server version. For example, a Notes 7 client will not be able to restore a document on a Domino 8 server.
Note: This option applies to the Update/Delete action only.
EnablementDisable monitoring design changeIf this field is checked, SecurTracTM will temporarily disable the monitoring of any design element changes in the selected database.


Monitor --> ACL Tab:

SectionFieldDescription
ACLCurrent Server ACL InformationClick this button to show the current ACL information for the selected database.
Show all ACL entriesSelect this option if you want to show all ACL entries in the log. If not selected, it will only show the modified ACL entries.
ExceptionDon't generate log if there is no change in ACLSelect this option to prevent logging if there is no change in the ACL although an ACL profile update has been detected.
Notification ListMailing addressSelect the person who will receive an e-mail notification immediately when this event occurs.
ImportanceYou can set the importance of the e-mail notification
Delivery Priority You can set the delivery priority of the e-mail notification.
Customize E-Mail Notification MessageSelect this option if you want to customize the subject and content of the e-mail notification message.
Add fieldAllows you to select predefined reserved fields
Export to Domino XML(DXL)Export the original ACL to DXLSelect this option if you want to enable the restore feature in SecurTrac. By enabling this option, SecurTrac will store the original Access Control List(ACL) in DXL format whenever it has been updated. In the ACL log, there will be a "Restore" button to restore the ACL back to its previous version. Please note that the Notes client being used must at least be the same version or newer when compared the Domino server version. For example, a Notes 7 client will not be able to restore a document on a Domino 8 server.
EnablementDisable monitoring ACL changeIf this field is checked, SecurTracTM will temporarily disable the monitoring of any ACL changes in the selected database.

Monitor --> Agent Tab:

SectionFieldDescription
Agent to monitorAgent to monitorSelect one or more Agents in the database to be monitored. Leave it blank if you want to monitor all Agent activities in the database.

Note: SecurTrac monitors server based Agents only.
EnablementDisable monitoring Agent activitiesIf this field is checked, SecurTracTM will temporarily disable the monitoring of any Agent activities in the selected database.


Report Tab:

SectionFieldDescription
ScheduleRun FrequencySelect the frequency of which the report is run. Daily, Weekly, Monthly.
Run at timeSpecify the time that the report should be run at.
Days of weekSpecify the days of the week that the report should run on.
Notification ListMailing AddressSpecify the mailing addresses of the people who should be notified of the reports.
ImportanceSpecify the importance of the message.
Delivery PrioritySpecify the delivery priority of the message.
Customize E-mail Notification MessageOption to customize the E-mail notification.
Add fieldAllows you to select predefined reserved fields
EnablementDisable sending reportIf this field is checked, SecurTracTM will temporarily disable the sending of any reports.


Administration Tab:

SectionFieldDescription
AdministrationOwnerSpecify the owner of the monitor document.
AdministratorsSpecify person(s) who can modify the current monitor document.
Settings Modification HistoryDateShows the date of modification for the current monitor document.
Updated byShows the persons who have modified the current monitor document.



-------------------------------------------------------------------------------------------------------------------------------------------