DESIGO INSIGHT, Audit trail for critical environments, V5.0
Contents
1. ccccceesesseeeeeeeeeeeeeaneeeeees 25 P PIA EAE E EEEE A AIEE PA T E AERE ATE ATT E 33 PUSA in R 18 R Recall filter from list on toolbar cccnccccccen 30 Recall filter from MEN c cece eeceeceeeeeeeeeeeeeeeeees 29 Refreshing the data Qf id cccccccssssseeeeeeeeeeeeeees 25 FREIMOV C TIMERS enara E 29 FEMOVE SOMING iesne a a 32 Remove sorting from all COIUMNS eeeeee 32 Rename Mle acnrant nan TE 30 Reset auto resize rows and columns 6 26 S Save Miter arenae Sec ee E 29 DOM ENNES ranae eaa a arrana 32 SOO aa eae aaeeeas aceon 32 Start and exit Database Audit Viewer 00 24 HACA MIVINO 224352 seale tenes a 18 V View archived audit data ou ccc cecccecseeeeeeeenees 35 View filters from other US IS cceccseeeeeeeeeeeeees 31 37 38 CM110796en_02 31 03 2012 Siemens Switzerland Ltd Infrastructure amp Cities Sector Building Technologies Division Gubelstrasse 22 6301 Zug Switzerland Tel 41 41 724 24 24 www siemens com sbt 38 38 Siemens Audit trail for critical environments V5 Building Technologies 2008 2012 Siemens Switzerland Ltd Subject to change CM110796en_02 3 31 20122. Other Programs E Archiving W Log Archiving Trend Archiving S Audit Trail Archiving Progress Indicator bar Audit Trail archiving progress I NUM j When complete the following message is displayed System Configurator E x Audit Trail database Archive All operation successfully completed The audit database is now empty all entries having been transferred to the archive When the Audit Trail is enabled the Purge All function is not allowed and is grayed out in menu and that for all databases Log Trend and Audit 5 a Archiving H Log Archiving lB Trend Archiving siereveervernen Archive All Purge 4ll Stark Archiving Properties This option is a means of triggering an archiving process which normally takes place automatically based on time or the number of entries For this option to work it is necessary to have first set up the automatic archiving settings The automatic archiving process is then triggered All settings apart from the trigger criterion are valid For details of how to set up automatic archiving refer to the next section 5 2 in this manual Desigo Insight Audit trail for critical environments V5 CM110796en_02 Archiving 31 03 2012 Siemens Building Technologies To trigger archiving manually start System Configurator right click on the Audit Trail Archiving folder and select Start Archiving You will be presented with
3. WEB Alarm Router Time Scheduler WEB Object Viewer WEB Trend Viewer WEB Log Viewer WEB Audit Viewer WEB Plant Viewer WEB Report Viewer WEB Reaction Processor Reaction Job Viewer DE Import NITEL Terminal Level 3 NCAS Access DCS Dialog 777 AS Access VISONIE Terminal Users belonging to group may run program 4 amp utomatically run program after user login 4 Select Audit Viewer from the list of installed programs 5 Select the check box User belonging to this group may run application 6 Click OK 7 Repeat steps 2 and 3 for all user groups 14 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies Audit Trail settings 31 03 2012 How to configure automatic Database Audit Viewer start at user log in How to configure Database Audit Viewer user group privileges Siemens Building Technologies Start System Configurator from the taskbar Under User Groups double click the desired user group folder In the Group properties dialog box go to the Programs tab Select Audit Viewer from the list of installed programs and select the check box Automatically run program after user log in Note To have this option available first select the check box User belonging to this group may run application Click OK Repeat steps 2 and 3 for all user groups Perform the following steps for every user group having access to
4. the capacity of the archive database can be defined between 1 000 and 1 000 000 entries For multiple management station projects the archived audit trail database is accessible by any Desigo Insight management station even if the Desigo Insight project database is not shared This is because the archive files are stored separately from the common SQL database 23 38 Desigo Insight Audit trail for critical environments V5 CM110796en_02 Archiving 31 03 2012 6 Database Audit Viewer About this section The Audit Trail is like an informer that tracks any attempts to modify records within Desigo Insight project databases Trend Log System or Audit itself If there are no unauthorized attempts to hack the databases the Audit Trail will remain empty If this is not the case the Database Audit Viewer allows viewing the contents of the Audit Trail to reconstruct the modification done to the project database 6 1 Introduction to Database Audit Viewer Functions The Database Audit Viewer is used to display all entries available in the Audit Trail for Desigo Insight To enable users to work on the Audit Trail and to select subsets of the data stored within it the Database Audit Viewer incorporates a range of sophisticated filter and sort options Audit Viewer includes the following functions e View the current audit trail database contents e Display data from the active archive database or archive files e Display data from legacy Pha
5. Building Technologies Database Audit Viewer 31 03 2012 Indication Archive opens Close Archive Why do I have to open an archive What happens if open all my archives 36 38 Siemens Building Technologies When an archive is open some additional information is display in status bar E Checksum Werfied 4 Database icons Icon Description B Contents of the Database Audit Viewer display come from Audit Trail database amp Contents of the Database Audit Viewer display come from an archive file Checksum icons Icon Description Checksum Verified The integrity of the archive file can be trusted The checksum has been recalculated and matches with the originally created checksum 2 Checksum Failed The integrity of the archive can not be trusted The archive file or its original checksum has been manipulated The checksum recalculation does not match with the originally created checksum E Checksum Mot available The integrity of the archive can not be verified The original checksum could not be found The checksum recalculation was not able to verify the archive against its original checksum 1 Select menu File gt Close Archive OR lt Ctrl X gt When an archive is closed the display will return to view the contents of the audit trail database When a database is archived it is converted into a compressed format which cannot be viewed directly When an archive is opened its con
6. Auto resize rows button on the toolbar To optimize all columns width 1 From Format menu chose Auto resize columns OR lt Ctrl Alt C gt OR click on the icon Auto resize columns button on the toolbar To optimize the view we suggest to Auto resize columns first and then Auto resize rows To reset restore original sizes rows 1 From Format menu chose Default rows size OR lt Cirl Alt Z gt Audit trail for critical environments V5 CM110796en_02 Database Audit Viewer 31 03 2012 6 3 1 Find If you are searching a specific text the Database Audit Viewer provides a Text search oriented Find function This is slightly different to the function that exists in other Desigo Insight applications Log Viewer Alarm Viewer which are object oriented The reason for this difference is the format of Audit Trail database which contains changes done in multiple databases and resulting data are mosily textual Find text Several possibilities to invoke the Find dialog box 1 Click in Find on the toolbar OR From the Edit menu select Find OR Press lt F3 gt Find O i Find what Find options C Match case C Match whole word C Search up i Default Down 3 Use Wildcard 3 C Find in specified column au ditLogID T Find Wext Cancel 2 Write the text to be found in the Find what field 3 Choose the find option Check box Description Match case Find functio
7. Database G CI E Audit Trail Database Authorized access data Simian tes gt Unauthorized attempts at modifying data triggers a new entry Features and Benefits e Database level Audit Trail prevents unauthorized attempts at modifying data within the audit trail log trend and system databases e Database Audit Viewer application is used for searching and reporting on data within the audit trail or secure archive data files from legacy Pharma Solutions e Hourly backups of all database transaction logs and daily full database backups can significantly reduce the potential data loss in case of disaster e The integrity of archived data is secured using a highly complex checksum for each archive file The readability of the archive files throughout the data retention period can optionally be guaranteed by using XML as the storage format 10 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies Database level Audit Trail 31 03 2012 3 Audit Trail installation About this section This section deals with the Project Utility critical environment settings in particular and describes the associated configuration procedures 3 1 Enabling the audit trial Enabling the audit trail for a Desigo Insight project must be done in project utility during the project creation Project Creation Wizard E xj Project Usage Options Specii how many management stations will use
8. Database Audit Viewer 1 Start System Configurator from the Desigo Insight taskbar 2 Open the desired user group properties by right clicking on the user group folder and clicking Properties 3 Inthe User Group Properties window open the Audit Viewer tab and configure the user group privileges as desired User Group Properties i l X Plant Wiewer Other Program Object Access Report Wiewer Reactions General Frograms System Configurator Site Access larm Viewer Alarm Router Time Scheduler Trend viewer Log Wiewer Audit Viewer Audit Viewer privileges Users belonging to this user group may perform the following actions in Audit Viewer Open Audit Trail archives Sort entries according to user defined criteria WEB Filter entries according to user defined criteria WEB Change column layout settings Le order etc Copy saved fiters queries User group privileges Database Audit Viewer command affected Open Audit Trail archives Open Archive command in the File menu Sort entries according to Sorting by clicking in the column headings user defined criteria Buttons to release sort order in the toolbar Filter entries according to Predefined and Save commands in the user defined criteria Filter menu Buttons and combo box to save and recall filter queries in the toolbar Change column layout Customize command in the Tools menu settings i e order etc Copy saved filters queries Copy button in
9. Description lt Shift gt lt Enter gt lt Ctrl gt lt Del gt lt lns gt lt Space gt lt Backspace gt lt Alt gt lt Up gt lt Downs gt lt Left gt lt Right gt lt Alt A gt 7 38 CM110796en_02 31 03 2012 Elements in the application window Command sequences Mouse click Context menus Date and time format 8 38 Siemens Building Technologies The elements in the application window are displayed as follows in this document Element Description Dialog boxes Names of dialog boxes tabs and fields in Windows are displayed tabs and fields in bold Example The Definitions dialog box allows you to Entries in Prompts to type in values in specific fields are displayed in italics fields Example Type in the database name in the Series field Example Type in 73 in the Series field Keyboard entries are placed between Buttons Buttons are displayed in bold Example When you click Cancel Example Click Save This tells you to click the Save button Menus and Names of menus and the associated menu commands are menu displayed in bold commands Example Click New Meter in the Dimensions menu to The individual commands of a sequence that you must carry in a given order are separated by gt Example System gt Meter gt right click gt New Meter This tells you to right click the Meter command in the System menu and then select New Me
10. archive File located in the archive Folder Capacity il months Archive Folder CAD ProjectiDIv4 IT10 Pharmajarcl Archive start date O1fos 2008 Archive Format f Binary Format SML Format ma 19 38 Desigo Insight Audit trail for critical environments V5 CM110796en_02 Archiving 31 03 2012 To set up automatic archiving select the Enable periodic archiving and purging check box The grayed out fields then become editable There are two mechanisms available for automatic archiving by Time period or by Number of entries e Time period is useful when regular timed backups have to be made e g when monitoring a manufacturing process Individual archives can then be created for specified time periods e Otherwise Number of entries can be used Then the engineer can control the archiving process on the basis of the amount of data and hence the archive file size General archive General settings apply to both archiving methods There are three parameters to settings set e Time of daily archiving The archive process is run once daily The settings determine whether there is actually any archiving to do or not If possible a time should be chosen when the management station is not being operated by a user e g at night This is because the archiving process consumes system resources and a user might notice some degradation of performance e Archive by Thi
11. 30 E Enabling enhanced backup seseeeeeeeeeeeeeees 12 Enabling mandatory Comments ccccccsseeeeees 12 Enabling the Audit Trail c cccccscsseeeeeseeeeeeeeees 11 Engineering OVESVIEW cccccsesceccseseeecesseesseaeees 13 Exit from Audit Vi WED cccccccceeeeeseeeeeseeeeees 24 F FINS 6 Stee eR ee ea mn ene 28 FICE VIEW marinogn a E 28 FIREN ecese a E N 28 FNC isha menen oi pmena aden 27 G General archive settings ccccssesseceesseseeeeeeeens 20 H How to configure automatic Database Audit Viewer Start at user IOG IN ccceeececcseeeeeceeeeeeeseeeeeees 15 Siemens Audit trail for critical environments V5 Building Technologies Index How to configure Database Audit Viewer user group INNO OS Secreniosnae a ety 15 How to configure user access to Database Audit WIC WG Nitsa st coethnics ate aa ee ea eee 14 I Indication Archive OPENS csesceeeseeeeeeeeeeeeeeeees 36 Indication of filter status 28 Indication of sort status eeeeeenerenernnnn 32 OQU CHO N atc seeteri i ceric nin teehee ori ein et 9 Introduction to Database Audit Viewer 24 M Manual archiving and Purging ccccceeeseeeeeees 17 Manual start Audit ViQWEr cccccecceeeeeeeeeeeeeee 24 Multiple management station projects 0 23 O OPER AICNIV E andria an aa 35 Operate the Database Audit Viewer 25 Operation elements
12. 35 1995 CitectSCADA Citect Pty Ltd see citect com Microsoft Microsoft Corporation see http www microsoft com TRADEMARKS t mark nopermit htm Windows Microsoft Corporation Windows NT Microsoft Corporation All the product names listed are trademarks or registered trademarks of their respective owners as listed in the table Further to the notes in this section and to facilitate the reading of the text these trademarks will not be indicated elsewhere in the text e g by use of symbols such as or Siemens Desigo Insight Audit trail for critical environments V5 Building Technologies About this document 5 38 CM110796en_02 31 03 2012 1 3 2 Copyright This document may be duplicated and distributed only with the express permission of Siemens and may be passed only to authorized persons or companies with the required technical knowledge 1 3 3 Quality assurance These documents have been prepared with great care e The contents of all documents are checked at regular intervals e Any corrections necessary are included in subsequent versions e Documents are automatically amended as a consequence of modifications and corrections to the products described Please make sure that you are aware of the latest document revision date If you find lack of clarity while using this document or if you have any criticisms or suggestions please contact the product manager in your nearest branch offi
13. Configurator DIY4_IT10_Pharma File Edit wiew Help 0 User Groups 1 E Internetworks H E INSIGHT Management Stations E Sites H E INSIGHT Programs Ei Other Programs E B Archiving fy Log Archiving E Trend Archiving 2 EE Archive All Purge 4ll Start Archiving Properties Right clicking on one of the archiving options displays three main archiving choices and the Properties option e Archive All Purge All gray e Start Archiving e Properties 17 38 Desigo Insight Audit trail for critical environments V5 CM110796en_02 Archiving 31 03 2012 Archive All Purge All Start Archiving Reference 18 38 Siemens Building Technologies This function allows audit trail data to be manually archived without having to carry out any setup for automatic archiving All of the audit trail database entries are transferred to the archive database Selecting the Archive All option results in the following prompt for confirmation System Configurator g x P Archive and remove all entries From the database Yes Mo Choosing Yes causes the contents of the Audit database to be transferred to the archive database While this process is running a progress indicator is displayed in the status bar 10 x File Edit View Help IFS INSIGHT Building Automation System 9 User Groups H Internetworks a INSIGHT Management Stations Sites H INSIGHT Programs
14. E POP ry Remove filters Remove sorting ce PS PSE SS See eS Se 4 Ifan additional criterion must be done you can repeat the procedure Note Between each filter criterion the operator applied is AND Indication of filter A funnel icon on the column header indicates that the data grid view is filtered status AuditLoglID AuditDBName S SysObiID PrimaryKey AuditActionID ColName DIV23 IPRJ BL10_RelLIT10_Audit DB ISHTLOG dbo LogEntry 19982498 E171 478F BE5B 68B927C5FBOD 2 HasSpokenComment il The current applicable filter criteria are also detailed on status bar o Audit BN ame DM23 PRJ BLIO Rel IT10_AudilOB ISHTLOG ColName HasSpokenComment A double click on the Filtering icon on the status bar opens a field containing full details of the filter criteria zi The following filter state is set KuditO BMarme DIVeSIPRI BL1O Rel IT10_4AudtlDB IGHTLOG ColName HasSpokenComment Cancel 28 38 Siemens Audit trail for critical environments V5 CM110796en_02 Building Technologies Database Audit Viewer 31 03 2012 Remove filters Save filter Recall filter from menu Siemens Building Technologies Remove all filters from a view i 1 Click Remove Filters on the toolbar OR Right click anywhere on the filtered data grid In the context menu select Remove Filters OR Select menu View gt Remove Filters Remove on specific filter cri
15. SIEMENS Desigo Insight Audit trail for critical environments V5 Engineering and user manual CM110796en_02 3 31 2012 Building Technologies Siemens Switzerland Ltd Infrastructure amp Cities Sector Building Technologies Division Gubelstrasse 22 6301 Zug Switzerland Tel 41 41 724 24 24 www siemens com sbt 2 38 Siemens Audit trail for critical environments V5 Building Technologies 2008 2012 Siemens Switzerland Ltd Subject to change CM110796en_02 31 03 2012 Siemens Building Technologies Table of contents 1 ADOUT THIS GOCUMENE sisiraan aaaea NUEVE 5 1 1 FEVISIOMMISIONY Ssiidni a a a 5 1 2 Reference documents cccccsesseccccceeseeeeeccaeeeeeeseueaseeeesseaueeeeessuaeeeeeessaaees 5 1 3 Before y Stari enses e aa a a alaia aa 5 1 3 1 TAG SINAN Si cca sas coh ha eee eee tah tase eared tag ee acced 5 1 3 2 ONY SN ae aces a se anes Somme ant accete nea deadetcccat aomeete 6 1 3 3 OUAINY ASSUN ANCE s eto a aa 6 1 3 4 Document use request to the reader cccceeecceeceeeeeeceeceeeeeeeeeeeaeeees 6 1 4 D c ment valdi y en a a a 6 1 5 TAG CIC ACCES oresonn aRar 7 1 6 RATING CONVENON S ninina a R E 7 2 Database level Audit Wall cccies cdiceicevsssceecediidccceesscisieticcicevsneieixtiiccereschk 9 2 1 MVOOUCUOD Sesin s det emeatensseattaccuaiateloucsuatansenet 9 3 Audit Trail installation nnaannnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn nnn 11 3 1 Enabling the audit iala
16. Viewer 31 03 2012 Define columns Note Change column width Reset auto resize rows and columns Hint 26 38 Siemens Building Technologies The user can customize workspace by modifying column width and order 1 From the Tools menu select customize workspace 2 Select or clear the tick boxes to display or hide columns me x Change Column Order i AuditLoglD iw Audit N ame iv Sys blD iw Frimarykey ke AuditActonlD ke ColM ame ke Old alue Default ke New alue iw Host ame kel Appl ame W ModitiedBy kel Full ame ke ModittedD ate Cancel ete 3 To change the column order select one of the displayed columns and use the arrow buttons to move it up or down in the list 4 Click Ok to apply the new settings The AuditLogID is the reference column and cannot be moved or hidden It appears on top and grayed in the list above The sizing of column width works in the same way as in Windows Explorer 1 Point mouse to column divider The cursor changes from a pointer to a double headed arrow 2 Holding down the left mouse button drag the frame in either direction indicated by the arrow 3 Release the mouse button to end the resize operation IbjlD Frimaryt ogEnty DORFFS You can also double click column divider to auto resize the column width To optimize all rows height 1 From Format menu chose Auto resize rows OR lt Ctrl Alt R gt OR click on the icon
17. a one eter rete rare rer ear re ere et er eee 28 6 3 3 SOM eree on cadences a ae Ea a E 32 6 4 Print from the Database Audit Viewer ccceccseeeeeeeeeeeeeeeeeeeaeeeeeeeeees 33 6 5 View archived audit data ccccccccccccsssccccceseceeceeeceeseeecesseeeceeseaeeeesaaeeees 35 Index 37 3 38 Audit trail for critical environments V5 CM110796en_02 Table of contents 3 31 2012 4 38 Siemens Audit trail for critical environments V5 CM110796en_02 Building Technologies Table of contents 31 03 2012 1 About this document 1 1 Revision history Version Date Changes Section Pages V5 CM110796en_02 Small text changes Table formatted 1 2 2011 V4 CM110796en_01 New V4 27 3 2008 1 2 Reference documents Refer to the following documents for more information on the engineering and operation of Desigo Insight Ref Document title Type of document Installation and configuration Engineering manual Engineering user function Engineering manual Operating the management station Volume 1 User s guide Operating the management station Volume 2 User s guide 1 3 Before you start 1 3 1 Trademarks Document No CM110591en CM110592en CM110588en01 CM110588en02 The trademarks used in this document are listed together with their legal owners in the following table The use of these trademarks is subject to international and national statutory provisions Trademarks Legal owner BACnet American National Standard ANSI ASHRAE 1
18. box 3 Chose if the document will contain all or the previously selected rows 4 Then chose the option Fit to page width if you want arrange all columns in one page 5 Click Ok 33 38 Audit trail for critical environments V5 CM110796en_02 Database Audit Viewer 31 03 2012 If Print preview was chosen at the beginning this one is displayed Otherwise the print dialog box is displayed and you can choose the printer you want to use HS Print preview Date 214 May 2008 Time z031 User gt David Management station TCH TS Host name SCH TS Current sort onder tAuditLagli ASC PrimaryKey WSC Audi GName DESC Current filter gt More Current rome rahi Date source tAcive praed d Project mame GLI Red IT10_Auedit Bele F F I LP ep ae I I F rlelele F F H ANTIN P P To execute the printing press the following button amp In the Print Preview dialog you have the following options Icon Description Sends the preview document to the printer Pl Zoom choose if you want increase or reduce the size of the 2 Auo view The Auto selection adapts the size of the view with the size of the preview dialog Displays on page at a time Displays two pages at a time Displays three pages at a time Displays four pages at a time B e B B Displays six pages at a time Close Closes the Print Preview dialog and returns to Database Audit Viewer Page 1 Shows and selects the page i
19. ce The addresses of the Siemens regional companies are available at www siemens com sbt 1 3 4 Document use request to the reader Before using our products it is important that you read the documents supplied with or ordered at the same time as the products equipment applications tools etc carefully and in full We assume that persons using our products and documents are authorized and trained appropriately and have the technical knowledge required to use our products as intended More information on the products and applications is available e On the intranet Siemens employees only at https workspace sbt siemens com content 00001 123 default aspx e From the Siemens branch office near you www siemens com sbt or from your system supplier e From the support team at headquarters fieldsupport Zug ch sot siemens com if there is no local point of contact Siemens assumes no liability to the extent allowed under the law for any losses resulting from a failure to comply with the aforementioned points or for the improper compliance of the same 1 4 Document validity This document ts valid for Desigo Insight Version 5 6 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies About this document 31 03 2012 Caution A N Hint Important comments Trademarks Introduction Display of keyboard keys Siemens Building Technologies 1 5 Target readers This doc
20. chiving menu Manually archive log trend and This either archives the entire database or audit database manually triggers an archive according to current settings depending on the selection Manually purge log and trend This option has no influence because when Audit Trail is enabled the Manual purge function is not allowed for any kind of database 16 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies Audit Trail settings 31 03 2012 About this section Reference Siemens Building Technologies 5 Archiving Archiving means that data that is available in a database e g Audit Trail Database are transferred in a first step to that database s archive database Then according to the archive schedule the data is moved into archive files either binary proprietary or XML format Purging data permanently deletes the records from the database This section deals with the archive function and the configuration options for the audit trail database To know more about the archive mechanism refer to the document CM110592en Engineering user function chapter Archiving 5 1 Manual archiving and purging To access these functions start System Configurator and expand the Archiving tree There are two setup options for Audit Trail data also log and trend data The setup procedure for Audit Trail data is to all intents and purposes identical A System
21. escending order with the AuditLogID column having the highest priority This default state is never indicated Sorting is initiated by clicking the heading of the column to be sorted The first column to which sorting is applied has the highest priority in the sort hierarchy The last column to be sorted has the lowest priority in the sort hierarchy 1 Click the heading of the relevant column Clicking the column heading for the first time sorts the appropriate column in ascending order 2 Click a second time to change the sort criterion to descending order 3 Click a third time to remove the sort criterion for this column When one or more columns are sorted arrowhead symbols are display in the appropriate column headings to indicated which of the column are sorted and in which order ascending or descending Further a number beside each symbol indicates the sort priority for this column AuditLogID 1 AuditDBName 3 SysObjID PrimaryKey 2 AuditActionID ColName LogEntry B46BAE 26 93D0 4FAS B2C3 9DDCB7EBBOS0 1 EventNumber 1 SAOS i a OF ah els RO If at least one of the columns in the view is sorted the following icon appears on the status bar FF A double click on the sort icon on the status bar opens a field containing full details of the sort criteria The following sort state is set AuditLogIO ASC PrimarkKey ASC AudtDbName DESC Cancel 1 Click the relevant column heading until sorting
22. h a e eh at Re a a All amp Alarm a System E User pF Status EventGroup E E S E Mae E Technical Des E Leer 16 04 2008 16 59 34 9 gt Medium Value modification Administrator Atlantis Buildin File Edit View Format Filter Tools Help e SR mlOlxial AuditLo Audit BH ame Spel lD Primary ey 4Audit ctionlD ColN ame bd Old alue 2096 DIV2SIPRIJ D1 V4 BLS4aurAuditlOB ISHTLOG dbo LogEntry SOOCFECE B475 46EF 8866 BDEDCCS47FS4 30 Ary alueR eal 150 gt Y Col ame rg alueR eal i entry out of 73 filtered 5 p We can see in Object Viewer the real point value is 190 But that is strange the only event we have in Log Viewer is Value modification with value 180 In normal case it s difficult to explain this difference With Audit Trail database associated with Audit Viewer we can investigate deeper and see someone has manipulated the Log database with SQL Server Management Studio tool and changed the value ModifiedD ate AuditD BN ame ColNa z Old alue New alue Host ame Appl ame Ae ed ee OA SIPAISD V4 BLAU AuditlDB ISHTLOG Reger 150 CHT 40209 Microsoft SOL Server Management Studia 9 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies Database level Audit Trail 31 03 2012 An audit trail enabled Desigo Insight project has following architecture Desigo Insight applications Log Database Trend Database System
23. igo Insight Ready for commissioning 13 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies Audit Trail settings 31 03 2012 4 2 Configuring the Database Audit Viewer Configuration options e Enabling user group access to Database Audit Viewer e Enabling automatic Database Audit Viewer start at user log in e Configuring the user group privileges for Database Audit Viewer functions e Configuring the archiving of the Audit Trail database Reference For details of user options to customize the Database Audit Viewer workspace column order visibility etc refer to chapter 6 4 2 1 User group settings for Database Audit Viewer How to configure user 1 Start System Configurator from the Desigo Insight taskbar access to Database 2 Open the desired user group properties by right clicking on the user group Audit Viewer folder and then selecting Properties 3 Inthe Group properties window go to the Programs tab User Group Properties i a j x Time Scheduler Trend Viewer Log Viewer Audit Viewer Plant Viewer Other Program Object Access Report Wiewer Reactions General Programs System Contiguratar Site Access Alarm Viewer Alarm Router Program settings oder Select a program from the list below and specify the options for that ee program These settings apply to all users belonging to the group Installed program System Configurator Alarm Viewer
24. is removed a First click column is sorting in ascending order b Second click column is sorting in descending order c Third click sorting is removed a 1 Click Remove sort OR Select View gt Remove Sorting OR Right click to open context menu and select Remove sorting Audit trail for critical environments V5 CM110796en_02 Database Audit Viewer 31 03 2012 Configure print settings Print Siemens Building Technologies 6 4 Print from the Database Audit Viewer From the Database Audit Viewer it is possible to print all or a selection of rows and then selected columns to display in the printed document You can configure the print setting properties for printing the Audit Trail database e Paper size orientation and margins e Printer selection and printer properties configuration 1 Click File gt Page setup 2 Configure the page settings 3 Click OK To print all or a selection of rows 1 Click Print 8 or Print preview Ey in toolbar OR File gt Print Preview or Print in menu and the following dialog box is displayed Print Options 2 Columns to print AuditLogD Row toprint i AuditD BN ame f All Selected wl SysOblD lv Primark ey W AuditActioiD lw ColH ame iw Old alue lw New alue lw HostN ame lw AppIN ame iw ModifiedBy iw FullN ame lv ModifiedDate Fit to page width J 2 Enable columns you are interested to printing with the check
25. isplays when the pointer is pointing at a menu command Displays all with the most important associated information Menu Toolbar x Database Audit iewer File Edit view Format Filter Tools Help sarka a AuditLoglD AuditDBName SysObjID PrimaryKey AuditActionD ColName Dldv alue NewValue lo entries Status bar Data grid The data grid column names can vary depending on the type of data displayed e g Audit Trail Archived audit data or Legacy XML archive Filtering and sorting settings apply to the type of data viewed Database Audit Viewer displays a snapshot of the data from the source selected e g Audit Trail database or archive file This means that new entries e g in the audit trail database are not displayed automatically The data grid can be refreshed by any of the following events e The user presses lt F5 gt e The user clicks the refresh button icon refresh button in the toolbar e The user selects Refresh from the View menu e The user sorts or filters the current view e Database Audit Viewer is restarted Right clicking a field in the data grid opens a context menu with the following content Context menu Description Filter by Xxxxxx Filter column based on selected entry Remove Filters Remove all filters in the current data grid Remove Sorting Remove sorting in the current data grid 25 38 Audit trail for critical environments V5 CM110796en_02 Database Audit
26. n is case sensitive Match whole word All words written in the Find what field must be available Search up default down Start searching up from the selected row Use wildcard Use characters and as wildcards and not as normal characters Find in specified column Limits the find function to a specific column Wildcards Description Represents any character or group of characters Represents a single character 4 Press Find Next 5 The row and column containing the text is selected 6 Press Find Next if you want search the next similar text 27 38 Siemens Audit trail for critical environments V5 CM110796en_02 Building Technologies Database Audit Viewer 31 03 2012 Note Find function search only text available in columns enable in customize workspace dialog See the above to enable disable columns 7 Once the search is finished no other text is found the following popup appears SearchDialog 4 x Finished search 6 3 2 Filtering Filter view Filtering the view produces a subset of the complete database If required the view can be filtered by more than one criterion simultaneously Also currently applied filters can be saved and can be recalled at any time Filter by 1 Place the cursor on the field to be used as a filter criterion 2 Right click to display the context menu 3 Select the Filter by command to filter the view by this item P
27. open the Edit filter dialog Filter gt Predefined you see only your saved filters An option allows you to see filters created by all users in the project and to copy them into your user profile 1 Select Filter gt Predefined to display the Edit filter dialog 2 Enable the check box Show filters from all users 15 x Edit filter Filter Warne Data Source Filter Criteria User Name Filter Lag Online database Sys blD LogEntry Administrator Filter LogE ntry Online database Sys0blD dbo LogE ntry Online database ModifiedBy wwO20 cai Users W Show filters from all users Copy filter from selected user to current user Apply selected filter Rename Delete Close 4A Select Filter gt Predefined to display the Edit filter dialog Enable the check box Show filters from all users if it is not Select the filter to be copied Press the button Copy filter from selected user to current user Click Save to save your changes Click Close OF PUR D P r 31 38 Audit trail for critical environments V5 CM110796en_02 31 03 2012 Database Audit Viewer Sort entries Indication of sort status Remove sorting Remove sorting from all columns 32 38 Siemens Building Technologies 6 3 3 Sorting As general rule each column can be sorted independently in ascending or descending order By default if no specific sorting criteria is applied each column is sorted in d
28. orce users to enter a comment for any write action taken This feature must be enabled on any audited project or projects running in a critical environment The function is independent of the license and can be activated only in Desigo PX projects if desired by the customer Refer to CM110591en Installation and configuration 3 3 Enabling enhanced backup When a Desigo Insight project is deployed in a critical environment it is often installed on an SQL Server instance In this case it is recommended that the Desigo Insight feature Enhanced Backup is enabled This feature uses built in SQL Server functionality to make hourly backups of the main databases These backups can then be used together with the Desigo Insight project backup to regenerate a crashed server Refer to CM110591en Installation and configuration 12 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies Audit Trail installation 31 03 2012 4 Audit Trail settings About this section This section deals with the configuration options for audit enabled projects and the Database Audit Viewer in particular It describes the associated configuration procedures 4 1 Engineering overview See chapter Start System Configurator User privileges 4 2 1 Set up user privileges for Database Audit Viewer Is archiving required System Configurator Archiving 5 2 Set up Audit Trail archiving Re start Des
29. ran a a a e taal 11 3 2 Enabling mandatory comments ccccccsseseceecceeeeeceeeceeseeeeeeeeeeeeeeeaaaass 12 3 3 Enabling enhanced backUDPisirisccrninrrnn iienaa iaaa aa 12 4 Audit Tall SettiNg S ssicirirani a aaa 13 4 1 Engineering OVEIVICW cccccsescccceeseeccseseeecceeeecceseeessageeessaueeeessnseesseass 13 4 2 Configuring the Database Audit Viewer cccccecseeeeeeeeeeeeeeeeeeeaeneeeess 14 4 2 1 User group settings for Database Audit Viewer ccccccseeeeeeeeeeeees 14 5 PREC MIEN Oireet a aa EEA 17 5 1 Manual archiving and purging isis ect cecckeoelsecties Genes arsinwcdtedansiandoloncchoctnaes 4 17 5 2 Automatic archiving and PUIQING ccccecsseeeeeeeeseeeeeeeseaeeeeeeeeeaeeeeeeeeeas 19 5 2 1 Archiving by time DEN OC ocsdacs anes hes saremaddienactbandesasdedenseh es uaeenadlsexcetieaaecate ae 21 5 2 2 Archiving by number Of entries cccccccssseeeeeeceeeseeeeseeeeeeeeesaeeeeeeeeeas 23 6 Database Audit VICWEL cccccceeesseeeseeeenseeeseeeesseeeseoensneesseoenseeessoneees 24 6 1 Introduction to Database Audit VICWET ccccccseeeceeeeeeeeeeeeeseeeeeeeeeeeas 24 6 2 Start and exit Database Audit VICWET ccecceeeceeeeeeeeeeeeeeeeeeeeaeaeeeees 24 6 3 Operate the Database Audit VieWEL cccccccccssseeeeeeeeeeeeseeeeeeeeeeeeeeaas 25 6 3 1 a Meee nnn ae ene ean te er ena on ne eee Een eee ee er er Re ee een ee 27 6 3 2 ag LURE a pmereeeters
30. rma Solution XML archives e Basic print options can be applied to the displayed data list e Personalized workspace saves user interface changes for each user e g window location and size column order filter or sort settings etc 6 2 Start and exit Database Audit Viewer Manually start To start Database Audit Viewer manually from Desigo Insight Database Audit Viewer 1 Click Database Audit Viewer on the Desigo Insight taskbar This opens the Database Audit Viewer The content window appears Exit from Database 1 Select File gt Exit Audit Viewer Note Settings such as the current Sort and Filter criteria as well as the current window size and position are saved when exiting on a user specific basis and re applied automatically when the Database Audit Viewer is next started by that user 24 38 Siemens Audit trail for critical environments V5 CM110796en_02 Building Technologies Database Audit Viewer 31 03 2012 Reference Database Audit Viewer application description Operation elements Refreshing the data grid Context menu Siemens Building Technologies 6 3 Operate the Database Audit Viewer For general information about operating Desigo Insight applications refer to the document CM110588 Operating the management station in section General Operation Descriptions of menu commands toolbar and content windows are located in the Desigo Insight online help A short description of the toolbar d
31. rmat i Binary Format C ML Format OK Cancel Capacity This setting determines how much data is allowed to accumulate in the database before it is transfered to the archive database Archive mode This check box determines if the data is archived when the criteria are met or whether the data is purged The default setting is Archive before purging If unchecked the data will be purged and permanently deleted When the Archive before purging option is checked data will be moved into archive files according to the Archive settings settings defined below Capacity This is the capacity of the archive database and this setting also determines the way in which the serialized archive files are created For example if the archive database capacity is 1 week then when it is full the serialized data file is created with the same capacity Archive folder This path determines the location of the serialized archive files Note that the active archive database itself is an SQL database and so is located elsewhere according to the SQL data path and is not directly accessible The default path can be left unchanged The archive Audit database path is set by default to Desigo Insight Project Root directory archaua 21 38 Desigo Insight Audit trail for critical environments V5 CM110796en_02 Archiving 31 03 2012 Note Note 22 38 Siemens Building Technologies To change the pa
32. s currently display 34 38 Siemens Audit trail for critical environments V5 CM110796en_02 Building Technologies Database Audit Viewer 31 03 2012 6 5 View archived audit data Archive overview The archiving of audit data in your Desigo Insight system normally has been set up by the commissioning engineer The archiving may be configured to take place on the basis of elapsed time or number of database entries Once the archives have been created the database can be opened and the data series can then be viewed in Database Audit Viewer Open Archive P 1 Click Open button in toolbar OR Select menu File gt Open Archive OR lt Ctrl O gt A dialog box is displayed showing the available archives 2 The archive files are identified by the time and date stamp of the first and the last entries The small icons have the following meaning Icon Description This filling tank icon means the archive file is not full More data Lt 2 may be added when the next archive operation is performed tt This full tank icon means the archive file is full according to the archive criteria selected 3 The size of the archive files is dependent on the archiving settings defined by the system engineer 4 Click Open to open the selected archive 5 After the archive is opened the archived data can be viewed in the Database Audit Viewer 35 38 Siemens Audit trail for critical environments V5 CM110796en_02
33. s is where you select whether archiving should happen by time period or by number of entries e Archive format The archive process can generate to two types of file The binary format is proprietary and can be opened only by a Desigo Insight application e g Database Audit Viewer or Trend Viewer The XML archive file format can be opened by either the respective Desigo Insight application or other XML editor tools 20 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies Archiving 31 03 2012 Database settings Archive settings Siemens Building Technologies 5 2 1 Archiving by time period If Archiving by time period is selected the following settings can be adjusted Audit Trail Archiving Properties Archiving Enable periodic archiving and purging General settings Time of daily archiving o2 00 Archive by Time period Number of entries Database settings Specifies the criteria For the entries to remain in the database Older entries are subject For the archiving process Capacity 1 weeks Archive mode IY Archive before purging 4rchive settings Saved entries are put into an archive database first IF its capacity is reached its contents is put into an archive file located in the archive Folder Capacity 1 days Archive Folder CADI ProjectDIV4_IT10_Pharmaiarci ie Archive start date Jo1 03 2008 Archive Fo
34. tents are temporarily mounted in the database server just like another database Only those databases that are in use will remain opened Those which are not used for a certain timeout period will be unlinked from the database server The Original archive file still exists Audit trail for critical environments V5 CM110796en_02 Database Audit Viewer 31 03 2012 Index A About Audit Trail section for engineers 11 PAGCTIVE Allann ouseceiaeanes 18 PACING eieren e a 17 Archiving by number of entries cccceeeeeeees 23 Archiving by time period cccccceceeseeeeeeeeeeeees 21 Audit Trail installation ccccccccecssseeeeeeeeeeeeaees 11 Audit Trail SOUINGS arrondies 13 Audit Trail VIWE osainen e 24 Automatic archiving and purging ccceeeeees 19 C Change column width ccccceeeseeeeeeeeeeeeeeeeeeeens 26 CISS FCI VC aossen aa 36 Configuration OPtiONS ccccceeeseeeeeeeeeeaeeeeeeeeens 14 Configure print Setting ccccccceseeeeeceeeeeeeseeeeees 33 Configuring the Database Audit Viewer 14 Context MENU ccccseeeecceccceeeeeeeeseeeeeeeeeeeeeeeeeeeeas 25 Copy a filter from another user to current user 31 D Database Audit Trail ccccccccccscessseeeeeseeeeeeeeeeees 9 Database Audit Viewer cccccceeseeeeeeeeeaeeeeees 24 DefiNGd COlWIMIAS essre 26 Delete filter cccccceecceceeeeseeeeeeeeeeseeeeesseeesees
35. ter in the menu that opens In command sequences right click and double click are mentioned specifically For all other cases left click the commands or buttons Right clicking normally opens a context menu How both time and date are displayed depends on your Windows operating system settings Desigo Insight Audit trail for critical environments V5 CM110796en_02 About this document 31 03 2012 2 Database level Audit Trail 2 1 Introduction In some critical environments like pharmaceutical installations there is demand for a high level of security on data stored in databases and to have a trace of all database manipulations e g unauthorized deletion of a log event Desigo Insight prevents all unauthorized attempts at modifying records in databases and saves a copy of these events in the Audit Trail database Associated with this audit trail the Database Audit Viewer allows you to view its contents or to open and view archives from this database To help understand the advantage of the audit trail let s see the following example E ditech Atlantis B 15 Object Yiewer File Edit wiew Go Favorites Help e Technical view PE fae Gy em CH G f Sg A H E5 14 Multistate output red function l0 x HA 15 Analog value AEP rival 190 0 Present value aS 1A Tanalaon walie Far oneratinn 2 oeueri mbLeLe clo fi Log Viewer a Eel x File Edit View Filter Tools Help cor
36. teria User Name Filter LogE ntry Online database Sps0blD dbo Logenty Administrator Saline database ModifiedBy wwD20 caj Filter Host PC Dainedaabase HostName CHTw40209 Users l Show filters from all users Copy filter from selected user to cunment user Save Apply selected filter Rename Delete Close E 1 Display the drop down list from the toolbar and select the filter to be applied ae Fiter Log Filter Log Filter LogEntr ia User modification Filter Host PC el bass Sooo Peer ere Whenever a filter is applied to a view any other active filters are removed 1 Select Filter gt Predefined to display the list of existing filters Select the filter to be renamed and double click on it in column Filter name or press the button Rename You are now in edit mode Write the new filter name Press enter to accept the new name Click Save to save your changes Click Close M oe oS Select Filter gt Predefined to display the list of existing filters Select the filter to be deleted Press the button Delete A confirmation dialog will display press Yes to confirm Click Save to save your changes Click Close oF ot ee IY Audit trail for critical environments V5 CM110796en_02 Database Audit Viewer 31 03 2012 View filters from other users Copy a filter from another user to current user Siemens Building Technologies By default when you
37. terion 1 Right click the relevant column Select Remove Filters can be saved for use later providing the user s group has the required permissions see 4 2 1 for User Group privileges Saved filters can be applied to any data grid view providing the data source is the same e g online database or archive file 1 Filter the view as required 2 Select Filter gt Save OR Click Filter ay on the toolbar to display the save filter dialog 3 Enter the filter name 4 Click Save Save New Filter a Ioj x Filter Hame Data Source Filter Criteria Filter Log Online database SysQblD LogEntry Define new filter Filter name Filter LagE ntr Data Source Online database Filter Criteria Syst bilD dbo LogE ntry Saved filters are user specific in that a user can only view filters that he or she has previously saved Save filters can be copied from one user to the current user providing that the current user s group has the required permissions see 4 2 1 for User Group privileges 1 Select Filter gt Predefined 2 In Edit filter dialog select the desired filter 3 Click Apply selected filter 4 Click Close 29 38 Audit trail for critical environments V5 CM110796en_02 Database Audit Viewer 31 03 2012 Recall filter from the list on toolbar Note Rename filter Delete filter 30 38 Siemens Building Technologies O x Filter Name Data Source Filter Cri
38. th click the Browse button You are then presented with the standard Windows selection dialog box Browse to the required location of your archive database folder When the correct opened folder appears in the Look in list box click the Open button This closes the dialog boxes and saves your selection Check that your selected path has been accepted The user must have Write privileges if the archive database and the SQL server are not on the same PC The standard path must also be written according to UNC convention e g chstadata01 project01 Archive start date This setting determines on which date the archiving process should start As the settings for time based archiving are intervals and not actual times or dates this setting is important to synchronize the creation of archive files to the desired time spans Archive format The archive process can generate archive files in one of two different types The binary format is proprietary and can only be opened with the Database Audit Viewer The XML format can be opened by Database Audit Viewer and also other XML editor tools Part of the archived data is accessible in Database Audit Viewer the data in the active archive database If binary format is selected for archives once transferred to serialized files the audit data is only indirectly accessible via Audit Viewer These archive files have to be opened in order for the data to be
39. the following prompt for confirmation System Configurator 4 xj P Archive according to current settings Yes ho Answering Yes will cause the archiving process to start While this process is running a progress indicator is displayed in the status bar When the process is complete a message will be displayed i System Configurator a a x 1 Audit Trail database Archiving successfully completed Depending upon the current settings for automatic archiving there may be some entries left in the audit database after completion of the archiving process 5 2 Automatic archiving and purging The settings described on the next pages apply equally for Audit Trail Log or Trend data archiving To set up automatic archiving start System Configurator right click on the Audit Trail Archiving option and select Properties You will be presented with the following dialog box Audit Trail Archiving Properties E x Archiving Enable periodic archiving and purging General settings Time of daily archiving a eal Archive by f Time period C Number of entries Database settings Specifies the criteria For the entries to remain in the database Older entries are subject for the archiving process Capacity 1 weeks z Archive mode M Archive before purging Archive settings Saved entries are put into an archive database First IF its capacity is reached its contents is put into an
40. the All queries window 4 Click OK 15 38 Desigo Insight Audit trail for critical environments V5 CM110796en_02 Audit Trail settings 31 03 2012 There are some settings associated with archiving to which a user group can be granted privileges These privilege settings are common for Log Trend and Audit Trail archiving They grant the user group access to the functions under User Group properties and tab System Configurator User Group Properties H X Time Scheduler Trend Viewer Log Wiewer Audit Viewer Plant Viewer Other Program Object Access Report Wiewer Reactions General Programs System Configurator Site Access Alarm Viewer Alarm Router System Configurator privileges r Users belonging to this user group may perform the following bh actions in System Configurator Configure general settings T Configure user group settings including adding and removing Configure Scopes T Configure intermetwork settings including adding and removing T Configure management station settings T Configure sites including adding and removing T Configure INSIGHT programs T Configure other programs T Configure settings for log and trend archiving T Manually archive log and trend database T Manually purge log and trend database User group privileges Audit Viewer command affected Configure settings for log trend Archive Database command in the Tools and audit trail ar
41. the new project The new project may be used by either a single or multiple clients 1 6 management stationa Please specity how the project will be used f Only one client will use the project Multiple clients will use the project Note IF you are not currently sure select the multiple chent option IY This computer will be a client for the project in the future Please specity Critical Environment Settings J Enable Audit Trail for this project lt Back Cancel When you create a new project the second wizard dialog box shows the option Enable Audit Trail for this project Click on the check box if you want to have it For the others step of Project creation is like usual and refer to the Installation and configuration Engineering manual CM110591en Caution Once your project is created with the audit trail option enabled or not it is not possible to change this option If you have forgotten to enable Audit Trail option and it is required in your project the only possibility is to create a new project 11 38 Siemens Desigo Insight Audit trail for critical environments V5 CM110796en_02 Building Technologies Audit Trail installation 31 03 2012 3 2 Enabling mandatory comments In a critical environment all user actions must be logged This log information must also include the reason why the user made the change In Desigo Insight a feature has been added that allows the BMS administrator to f
42. ument contains all information needed to activate and engineer the database level audit trail functions of Desigo Insight This engineering information pertains to the desktop and server versions of the Desigo V5 user applications Note that some installation information and configuration functions are covered in the Installation and configuration manual CM110591 and User Manual CM110588 1 6 Printing conventions Symbols used Example Users with access level 2 or higher can change or delete data The symbol to the left appears if data can be deleted or changed irretrievably Example This symbol denotes information that helps you properly operate and use the programs This information is based on experience we strongly recommend to carefully study this information Important information is grayed Trademarks and registered trademarks of other manufacturers are used in this document for the sole purpose of identifying the products concerned Typographic conventions The following conventions apply to this document for names of buttons keys and fields Keyboard keys are always displayed between lt and gt Example lt Shift gt lt Shift N gt Table of the keys used in this document Press key Shift key Enter key Control key Ctrl Delete key Insertion key Space key Backspace key Alt key Arrow keys Alt key plus key A Desigo Insight Audit trail for critical environments V5 About this document
43. viewed in readable form Refer to the user guide for details of how to do this Desigo Insight Audit trail for critical environments V5 CM110796en_02 Archiving 31 03 2012 Multiple management station projects Siemens Building Technologies 5 2 2 Archiving by number of entries This archiving mechanism allows the engineer to set up an archiving system based on the volume of data When the Archive by flag is set to Number of entries then the setup dialog box appears thus Audit Trail Archiving Properties a 7 i x Archiving I Enable periodic archiving and purging General settings Time of daily archiving 02 00 E Archive by Time period f Number of entries Database settings Specifies the criteria for the entries to remain in the database Older entries are subject For the archiving process Capacity 10000 Archive mode IY Archive before purging Archive settings Saved entries are puk into an archive database First IF its capacity is reached its contents is put into an archive file located in the archive Folder Capacity 10000 Archive Folder CAT ProjectiDIv4 IT10_Pharmalarcl Archive Format f Binary Format XML Format cma General settings are the same as described under Archiving by time period above Under database settings the capacity is given in terms of number of entries this is defined between 0 and 100 000 entries Under Archive settings
Download Pdf Manuals
Related Search