About this record termnial unknown

[saadqkhan]

Hello Erman,

What does it means if i am on invoices form and i am on specific invoice and i click about this record it shows me
user=xyz
table=inv
system logon=unknown
terminal unknown

What are the reasons it shows me system logon and terminal unknown?

Please guide.

Thanks and Regards,
Saad Qaiser Khan

[ErmanArslansOracleBlog]

Please send me a screenshot describing your issue and the form in question.

[saadqkhan]

Erman can you please tell me how to attach something here. I am unable  to figure it out.

Regards,
Saad

[ErmanArslansOracleBlog]

Register as a user.
Then click on reply. (on your issue)
After that you will have a button named "insert image", you will also have a button named "More", which can be used for uploading any files.

[saadqkhan]

PFA.

Thanks and regards,
Saad

[saadqkhan]

[ErmanArslansOracleBlog]

Please refer to the Oracle Applications System Administrator's Guide User and Data Auditing "About This Record Window" section.
You need to set a profile to be able to see System Logon and Terminal information.
This documentation should answer these questions.

[saadqkhan]

Hello Erman,

How can I see the ip address of comp who loggen in as sysadmin?
Please guide.

Thanks and Regards,
Saad

[saadqkhan]

Hello Erman,

I have checked the access log with date 15th march but no where I can see the username=SYSADMIN. So how can this record show that sysadmin made this invoice.

Please guide
Thanks and Regards,
Saad Qaiser Khan

[ErmanArslansOracleBlog]

Do you have EBS audit enabled?

[saadqkhan]

Yes erman its enabled.

Regards,
Saad

[saadqkhan]

sysadmin_logs.xls

[saadqkhan]

Hello,

How can i check which ip access this sysadmin. I checked 15th march access log but couldn't find any username that logged in as sysadmin. I find it in resp. Can you please guide me .

Thanks and Regards,
Saad

[saadqkhan]

10.200.0.220 - - [28/Mar/2017:12:04:25 +0500] "GET /forms/frmservlet?appletmode=nonforms&HTMLpageTitle=&HTMLpreApplet=&code=oracle/apps/fnd/formsClient/FormsLauncher.class&width=400&height=300&archive=/OA_JAVA/oracle/apps/fnd/jar/fndforms.jar,/OA_JAVA/oracle/apps/fnd/jar/fndformsi18n.jar,/OA_JAVA/oracle/apps/fnd/jar/fndewt.jar,/OA_JAVA/oracle/apps/fnd/jar/fndswing.jar,/OA_JAVA/oracle/apps/fnd/jar/fndbalishare.jar,/OA_JAVA/oracle/apps/fnd/jar/fndaol.jar,/OA_JAVA/oracle/apps/fnd/jar/fndctx.jar,/OA_JAVA/oracle/apps/fnd/jar/fndlist.jar&jinit_appletcache=off&gp15=icx_ticket&gv15=Lyd41n0lI43tUF0MssDHxA..&gp2=resp_app&gv2=SYSADMIN&gp3=resp&gv3=REQUEST+SUBMISSION_RECON&gp4=sec_group&gv4=STANDARD&gp5=function&gv5=FND_FNDRSRUN&gp6=other_params&gv6=&gp7=jsp_agent&gv7=http%3A%2F%2Fnew-ofsa-live.nibpk.com%3A8000%2FOA_HTML%2F&gp13=dbc&gv13=PROD HTTP/1.1" 200 46024 0 "http://new-ofsa-live.nibpk.com:8000/OA_HTML/OA.jsp?page=/oracle/apps/fnd/framework/navigate/webui/NewHomePG&homePage=Y&retainAM=Y&addBreadCrumb=N&OAMC=G&WFEBizWorklist=Y&oapc=2&transactionid=430914141&oas=3itRx6z25H2DiA1HbC2Scg.." "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E)"

can you please tell me what &gp2=resp_app&gv2=SYSADMIN it means in these logs.

Thanks and Regards,
Saad

[saadqkhan]

Also would apache logs captured ip address if i access the app using teamviewer?

Thanks and Regards,
Saad

[ErmanArslansOracleBlog]

From EBS perspective or let's say from Apache perspective, there is no difference between  a client using its own browser or a client using teamviewer to use a browser. EBS will not be aware from this.
What you get will be the info of the machine that hosts the Teamviewer.

If  it is forms , then my answer is  "How To Find The IP Address Of The Client Machine From Where A Particular Forms User Is Connected ? (Doc ID 879092.1)"

For the other questions,

1)check access logs (Apache access log), you should see the ip address there.. However, linking that ip with that specific client that is using forms to do the update, will not be possible.

2)Those arguments are internal, but they basically give  the responsibility and other things that are used for the forms client.

[saadqkhan]

 info of the machine that hosts the Teamviewer

it means the ip address of the machine that is accessing the teamviewer or the machine that has been accessed.

Thanks and Regards,
Saad

[ErmanArslansOracleBlog]

the machine that is being accessed.