--- title: Understanding and Using IBM Cognos Audit Data description: How to use Cognos logs for debugging, data mining and analysis, uses for Cognos audit data. --- [![envisn](https://www.envisn.com/hs-fs/file-15282154-gif/images/logo.gif?width=120&name=logo.gif "envisn")](https://www.envisn.com) [![Request a Demo](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/973f9256-ef61-4ab8-ab2d-a004a90a18be) ![cognos security management in netvisn](https://www.envisn.com/hs-fs/file-897555366-png/images/icon-secur-manag.png?width=143&name=icon-secur-manag.png "cognos security management in netvisn") # Cognos Security ### *as you've never seen it* # Envisn's IBM Cognos Blog ## [Understanding and Using IBM Cognos Audit Data](https://www.envisn.com/envisn-cognos-blog/bid/45764/Understanding-and-Using-IBM-Cognos-Audit-Data) Posted by [Linda Sevier](https://www.envisn.com/envisn-cognos-blog/author/linda-sevier) - [Tweet](https://twitter.com/share) *By Eugene Marcotte, [Envisn, Inc.](https://www.envisn.com/) * ## Background Large complex software systems often have logs for various information that can be useful for debugging, data mining and analysis. When an application or a system crashes often the error is found in such a log. When performance becomes an issue, the logs can often be useful to try and understand what is going on with the system so you can figure out how to react. IBM Cognos is no different. There are many different types, targets, and levels of Cognos logging. It has the basic things like error reporting and timestamps which can help isolate performance issues, but it also contains a few other things. For instance, it can tell you when reports were run, when users logged on, when changes were made to objects and many other things. Using this data you could start collecting statistics about how your environment is used and keep track of what is happening without resorting to guessing. [The IBM Cognos Administration and Security Guide](http://publib.boulder.ibm.com/infocenter/c8bi/v8r4m0/index.jsp?topic=/com.ibm.swg.im.cognos.ug_cra.8.4.0.doc/ug_cra.html) has some fairly detailed information about how to [set up and use the Cognos logging facilities](http://publib.boulder.ibm.com/infocenter/c8bi/v8r4m0/index.jsp?topic=/com.ibm.swg.im.cognos.ug_cra.8.4.0.doc/ug_cra_id2986Logging.html). This documentation is mostly aimed at administrators, but it is useful for planning how to lay out your environment as well, since you have to make more choices about where and how you store the log data. By default there is only has one Cognos logging target for “File.” This set up has the various Cognos components logging to cogserver.log. This file log is useful for administrators since it can be used with some standard administration tools like “tail” to watch the log as events occur. It is not a very useful format for doing analysis and reporting, however. The logging configuration in Cognos Configuration can be configured with multiple different targets of various types. In addition to the File type mentioned above, it can be configured to write to the system log, a named windows event log, or a SQL database. Using an SQL database will let you then consume the data using the Cognos tools you're already familiar with and using – Framework Manager, Datasources, and Report and Query Studio. Cognos even provides a [sample package](http://publib.boulder.ibm.com/infocenter/c8bi/v8r4m0/index.jsp?topic=/com.ibm.swg.im.cognos.ug_cra.8.4.0.doc/ug_cra_id3318AuditReports.html) for doing reporting against this database. They provide a handful of reports which can be run to start understanding who, how, and when your Cognos environment is being used. There is quite a wealth of information hidden in these tables. There is [some Cognos documentation](http://publib.boulder.ibm.com/infocenter/c8bi/v8r4m0/index.jsp?topic=/com.ibm.swg.im.cognos.ug_cra.8.4.1.doc/ug_cra_i_DataSchemaforLogMessages.html) about what the tables and their data available for reference. Basically the types of events are split out into various tables. ## Cognos Tables ### Cognos User Logons Table This table is fairly obvious: it captures the log on and log off event for people accessing Cognos. This includes Framework Manager, Cognos Connection, and third party SDK using applications. It also includes “timeout” information for when a session is not explicitly stopped and instead is terminated after a set period of time. From my research, it seems that shutting down Cognos will result in unbalanced logins. This means sessions could have a logon, without a time out or log off. To enable this table your Content Manager service needs to be set to at least basic logging. ### Cognos Action Table The action table is often ignored by people using the audit tables. It acts as a log for operations performed on Cognos content store objects. This includes making querying for or making changes to objects in the various studios, Cognos Connection, or third party applications. It can tell you which session – which can be tied to a user using a join – performed which type of action (update, add, move, etc) on which objects. The objects, unfortunately, are listed as a sort of display name. This makes the audit data difficult to use when tracking the history of an object, but easy to use for building simple reports. Another limitation to this table is that operations that affect multiple objects only show one row. For instance, if you select multiple objects' check boxes in Cognos Connection and click delete, you will only get an entry for the first. Here again, to enable this table your Content Manager service needs to be set to at least basic logging. ### Run Report & Review Report Tables Using these tables you can figure out who, when, and which reports are used. This is useful if you want to figure out which reports are taking the most time to run, which reports are most frequently used, or other information such as if your saved output is being used or if runs are being done each time. These pieces of information can be critical in determining how to deal with performance issues in a Cognos environment. To enable this table your report service needs to be set to at least basic logging. *In a future article we will share with you how some of this data from audit tables can be used in creative ways.* [![free download expert guide to cognos audit data](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/8d7bc58a-4b43-4560-8d8e-74a724888296.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/8d7bc58a-4b43-4560-8d8e-74a724888296) *© [Envisn, Inc.](https://www.envisn.com/), All rights reserved.** * Topics: [Cognos Auditing](https://www.envisn.com/envisn-cognos-blog/topic/cognos-auditing), [Cognos Audit Log](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-log) *Your feedback is very important to us - we’d love to hear your comments!* ### Subscribe to Envisn's IBM Cognos Blog [![Your Content Store contains thousands of objects with hundreds of properties. netvisn gives you control of all of it learn more](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/70307/c76703b2-30ab-4086-9bc3-f2c890de7c5f.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/70307/c76703b2-30ab-4086-9bc3-f2c890de7c5f) ### Posts by Category - [Cognos Content Store (22)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-content-store) - [Cognos BI Best Practices (21)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-best-practices) - [Cognos Analytics (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-analytics) - [Cognos BI administration (19)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-bi-administration) - [Cognos Security (18)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-security) - [Cognos Tools (14)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-tools) - [Cognos Audit Data (11)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-data) - [Cognos Reporting (9)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-reporting) - [Cognos Auditing (8)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-auditing) - [Cognos 10 (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-10) - [Cognos Framework Manager (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-framework-manager) - [Cognos Metadata (7)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-metadata) - [BI Trends (6)](https://www.envisn.com/envisn-cognos-blog/topic/bi-trends) - [IBM Information on Demand (6)](https://www.envisn.com/envisn-cognos-blog/topic/ibm-information-on-demand) - [Cognos Audit Log (5)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-audit-log) - [cognos impact analysis (4)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-impact-analysis) - [Big Data (3)](https://www.envisn.com/envisn-cognos-blog/topic/big-data) - [Cognos Data Sources (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-sources) - [Cognos Documentation (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-documentation) - [Cognos Scheduling (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-scheduling) - [Product Information (3)](https://www.envisn.com/envisn-cognos-blog/topic/product-information) - [cognos data lineage (3)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-lineage) - [Archiving Cognos Content (2)](https://www.envisn.com/envisn-cognos-blog/topic/archiving-cognos-content) - [Cognos FM Model (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model) - [Cognos migration (2)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-migration) - [Announcements (1)](https://www.envisn.com/envisn-cognos-blog/topic/announcements) - [Cognos Change Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-change-management) - [Cognos Data Provenance (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-data-provenance) - [Cognos Hotfiles (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-hotfiles) - [Cognos Powerplay (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-powerplay) - [Cognos Triggers (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-triggers) - [Consolidating Cognos Environments (1)](https://www.envisn.com/envisn-cognos-blog/topic/consolidating-cognos-environments) - [Impromptu (1)](https://www.envisn.com/envisn-cognos-blog/topic/impromptu) - [Merging Content Stores (1)](https://www.envisn.com/envisn-cognos-blog/topic/merging-content-stores) - [Remote Cognos Management (1)](https://www.envisn.com/envisn-cognos-blog/topic/remote-cognos-management) - [cognos deployments (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-deployments) - [cognos fm model documentation (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-fm-model-documentation) - [cognos workspace (1)](https://www.envisn.com/envisn-cognos-blog/topic/cognos-workspace) - [netvisn (1)](https://www.envisn.com/envisn-cognos-blog/topic/netvisn) [see all](https://www.envisn.com/envisn-cognos-blog/bid/45764/Understanding-and-Using-IBM-Cognos-Audit-Data#) ### Posts by Popularity [![cognos custom queries free download](https://no-cache.hubspot.com/cta/default/70307/81f539ec-bb7d-4a54-a992-18729e2cabda.png)](http://cta-redirect.hubspot.com/cta/redirect/70307/81f539ec-bb7d-4a54-a992-18729e2cabda) ### [Cognos Tools from Envisn](https://www.envisn.com/envisn-products) [NetVisn](https://www.envisn.com/netvisn) [AutoVisn](https://www.envisn.com/autovisn-cogos-scheduler) [UniVisn](https://www.envisn.com/univisn-cognos-performance-management) [DocuVisn](https://www.envisn.com/docuvisn-cognos-documentation) ### [Cognos Resources](https://www.envisn.com/resources) [Envisn’s IBM Cognos Blog](https://www.envisn.com/envisn-cognos-blog) [Custom Query Library](https://www.envisn.com/custom-query-library) [Tutorial Videos](https://www.envisn.com/cognos-demo-videos) [Mastering Cognos Security](https://www.envisn.com/mastering-ibm-cognos-security) [Content Store Survival Guide](https://www.envisn.com/content-store-survival-guide) [Expert Guide to Cognos Audit Data](https://www.envisn.com/cognos-audit-data-expert-guide) ### [Contact Envisn](https://www.envisn.com/contact) [Request a Demo](https://www.envisn.com/request-a-demo) [Support](https://www.envisn.com/support) 512-991-3999 [info@envisn.com](mailto:info@envisn.com) ### Latest Cognos Posts | [![youtube](https://www.envisn.com/hs-fs/hubfs/youtube.png?width=30&name=youtube.png)](https://www.youtube.com/user/envisn) | [![linkedin](https://www.envisn.com/hs-fs/hubfs/linkedin.png?width=30&name=linkedin.png)](https://www.linkedin.com/company/envisn-inc./) | [![twitter](https://www.envisn.com/hs-fs/hubfs/twitter.png?width=30&name=twitter.png)](https://twitter.com/Envisn) | [![facebook](https://www.envisn.com/hs-fs/hubfs/facebook.png?width=30&name=facebook.png)](https://www.facebook.com/envisn/) | | --- | --- | --- | --- | [![Real Time Analytics](https://static.getclicky.com/media/links/badge.gif)](http://clicky.com/101126274) ![Clicky](https://in.getclicky.com/101126274ns.gif) 3000 Polar Lane, Suite 901, Cedar Park, TX 78613 USA *Serving North America, Europe, and the UK with plans to expand to other areas in the near future. **[Privacy, Copyright & Liability](https://www.envisn.com/privacy-copyright-liability)*