-
Notifications
You must be signed in to change notification settings - Fork 188
/
290-object-collection-audit-errors.xml
45 lines (44 loc) · 1.65 KB
/
290-object-collection-audit-errors.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
<?xml version="1.0" encoding="UTF-8"?>
<!--
~ Copyright (c) 2010-2019 Evolveum and contributors
~
~ This work is dual-licensed under the Apache License 2.0
~ and European Union Public License. See LICENSE file for details.
-->
<objectCollection xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
oid="00000000-0000-0000-0001-000000000004">
<name>Error audit records</name>
<auditSearch>
<recordQuery>select * from m_audit_event as aer where aer.outcome=3 and aer.eventStage=1</recordQuery>
<interval>P1D</interval>
</auditSearch>
<type>AuditEventRecordType</type>
<filter>
<q:and>
<q:equal>
<q:path>eventStage</q:path>
<q:value>execution</q:value>
</q:equal>
<q:equal>
<q:path>outcome</q:path>
<q:value>fatal_error</q:value>
</q:equal>
<q:greater>
<q:path>timestamp</q:path>
<expression>
<script>
<code>
calendar = basic.addDuration(basic.currentDateTime(), "-P1D");
return calendar;
</code>
</script>
</expression>
</q:greater>
</q:and>
</filter>
<domain>
<collectionRef oid="00000000-0000-0000-0001-000000000285" type="c:ObjectCollectionType"/>
</domain>
</objectCollection>