That’s exactly what I told my team. I even asked if they had another server outside the server group pointing to that same database doing something and got a negative. I’m still gathering information..
Is there a way to capture what IP or session a transaction came to the server? Joe From: Brian Goralczyk Sent: Thursday, March 29, 2012 6:16 PM Newsgroups: public.remedy.arsystem.general To: [email protected] Subject: Re: Sort of OT: Question for timezone experts out there.. ** Joe, The only way for that to happen (in my experience) is something performing outside of the system. Even if you have workflow that is firing direct SQL it would show up in the logs. It has to be initiated external to ARS. I would look for system scripts or external connections to the DB from some other app. HTH, Brian Goralczyk Phone 574-643-1144 Email [email protected] On Thu, Mar 29, 2012 at 4:05 PM, patchsk <[email protected]> wrote: ** You might have checked this already. Just for my understanding when these records got deleted did you notice if there are any changes to CTM:People record: Last Modified By etc? On Thursday, March 29, 2012 4:49:39 PM UTC-5, Joe Martin D'Souza wrote: ** We did think of that – but because we didn’t see anything on the 4 logs that I turned on, I thought it can’t possibly be that.. There was not a single delete action logged on the sql logs and yet there were thousands of CTM:People Permission Groups entries just gone.. Is there anything that goes on either on the AIE, CMDB, or any other AR System owned processes that may escape those logs? Joe From: patchsk Sent: Thursday, March 29, 2012 5:44 PM Newsgroups: public.remedy.arsystem.general To: [email protected] Subject: Re: Sort of OT: Question for timezone experts out there.. ** In ITSM 7.6.03+ there is this new feature when you create a new people entry it creates a CI in Person class of CMDB. I would imagine it has to run automated reconciliation jobs to do that. I am not sure if it has any role to play with what you are seeing in your environment. And these should be caught in api/sql logs. You can turn on logging on reconciliation jobs also. There are a few filters you can turn off for this sync to stop or disable the reconciliation jobs templorarily. On Thursday, March 29, 2012 3:55:23 PM UTC-5, Joe Martin D'Souza wrote: ** Thanks. I just had a colleague confirm what you just said.. the –4:00 is to get the Greenwich time, and that 12:05:05 AM is the actual local time that the delete transaction happened.. Are there any Remedy processes that can possibly happen that might escape the probe of these 4 internal logs I turned on - API, SQL, Filter and Escalation ??? I want to make a possible list of every possible way this may be happening.. Joe From: Shellman, David Sent: Thursday, March 29, 2012 4:37 PM Newsgroups: public.remedy.arsystem.general To: [email protected] Subject: Re: Sort of OT: Question for timezone experts out there.. ** I'm not an expert at the DB timestamps. The way I read the data though is that it is 27 Mar 2012 at 12:05:05 AM and the database is set with a 4 hour offset from UTC (Daylight Savings). Dave -------------------------------------------------------------------------- From: Action Request System discussion list(ARSList) [mailto:[email protected]] On Behalf Of Joe Martin D'Souza Sent: Thursday, March 29, 2012 4:29 PM To: [email protected] Subject: Sort of OT: Question for timezone experts out there.. ** We are having an issue with our Remedy application, where it appears that there is an update on our ‘CTM:People Permission Groups’ form where certain entries are ‘disappearing mysteriously’ apparently with no explanation as to what's causing them to disappear. I turned on API, SQL, Escalation and Filter logging, and nothing traps any activity of any deletes on that form. Which led me to suspect that this might be happening from ‘outside’ of the AR System API layer.. I was told by some of the developers that were on site here before me that they can swear there is nothing outside the application layer that performs any updates or deletes for that matter to our Remedy applications.. However since I cannot get anything through logging, I decided to lay a trap by creating a DB trigger, to capture the DB User and the DB time that these deletes are happening by creating an external audit table on the T table that the CTM:People Permission Groups records are stored.. The time field column I defined in Oracle as TIMESTAMP WITH TIME ZONE.. I need help to interpret the time displayed in this column.. It is displayed as: 27-MAR-12 12.05.05.118256 AM –04:00 How would I convert that to EST? Is it 27-MAR-12 01:05:05 AM EST ??? Is it 26-MAR-12 11:05:05 PM EST ??? Or is it 27-MAR-12 12:05:05 AM EST ??? Joe _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
