topic Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r in Alfresco Archive

New Auditing Mechanism in Ent3.2, Comm. 3.2r

simon_white — Tue, 26 Jan 2010 13:54:51 GMT

Hello all,I've been trying to do some work for an Alfresco Enterprise customer that involves the evaluation and configuring of auditing behaviour. The customer will mostly be using Alfresco Share.As the customer will soon be migrating to Enterprise 3.2, I've been trying to look at evaluating the co

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

derek — Tue, 26 Jan 2010 14:35:42 GMT

Hi, Simon

Thanks for starting the new thread; it's definitely the right thing to do. I have updated the Wiki page (http://wiki.alfresco.com/wiki/Auditing_(from_V3.2r)) and given a reference the code that produces the API-based data. I'm aware that the documentation is nascent; I was hoping to drive it from samples and code until the framework had been tested a bit. It's been functionally tested, of course, but I'd like to see what comes out of community and customer use.

The paths (by which the produced data is keyed) are arbitrary. There are some shortcuts that allow the paths in the produced map to be shortened when data is audited. If you're consuming the data, the only thing that matters is the full path.

Let me know if you need any more direction.

Regards

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

simon_white — Wed, 27 Jan 2010 15:58:15 GMT

Derek,

Thanks for getting back to me. The following example is all community 3.2r, MySQL, Share and Alfresco Repository co-located in Tomcat:

I've made the following change to tomcat/shared/classes/alfresco-global.properties, and to tomcat/webapps/alfresco/WEB-INF/classes/alfresco/repository.properties for good measure:

audit.enabled=true
audit.useNewConfig=true‍‍

I've then replaced alfresco-audit-repository.xml with:


<?xml version='1.0' encoding='UTF-8'?>
<Audit
    xmlns="http://www.alfresco.org/repo/audit/model/3.2"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.alfresco.org/repo/audit/model/3.2 alfresco-audit-3.2.xsd"
    >

    <DataExtractors>
       <DataExtractor name="simpleValue" class="org.alfresco.repo.audit.extractor.SimpleValueDataExtractor"/>
    </DataExtractors>

    <DataGenerators>
       <DataGenerator name="transactionId" class="org.alfresco.repo.audit.generator.TransactionIdDataGenerator"/>
    </DataGenerators>

    <PathMappings>
        <PathMap source="/repository" target="/repository"/>
    </PathMappings>

    <Application name="Alfresco Repository" key="repository">
        <AuditPath key="services">
            <GenerateValue key="txn" dataGenerator="transactionId"/>
            <AuditPath key="contentservice">
                <AuditPath key="getreader">
                    <AuditPath key="return">
                        <RecordValue key="value" dataExtractor="simpleValue"/>
                    </AuditPath>
                </AuditPath>
            </AuditPath>
        </AuditPath>
    </Application>

</Audit>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I then added the following to the top of my tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties


# Audit debugging
 log4j.logger.org.alfresco.repo.audit.PublicServiceIdentifierImpl=INFO, Audit
 log4j.logger.org.alfresco.repo.audit=DEBUG, Audit
 log4j.logger.org.alfresco.repo.audit.AuditMethodInterceptor=DEBUG, Audit
 log4j.appender.Audit=org.apache.log4j.DailyRollingFileAppender
 log4j.appender.Audit.File=audit.log
 log4j.appender.Audit.Append=true
 log4j.appender.Audit.DatePattern='.'yyyy-MM-dd
 log4j.appender.Audit.layout=org.apache.log4j.PatternLayout
 log4j.appender.Audit.layout.ConversionPattern=%d{ABSOLUTE} %-5p [%c] %m%n
‍‍‍‍‍‍‍‍‍‍‍‍

I then start Alfresco Share, navigate to an existing Site, read an existing Wiki page and create a new Wiki page. I'm expecting to see entries in alf_audit_faq, or at least my new audit.log about the use of ContentService.getReader(), but I can't see anything.

What have I missed?

Simon

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

derek — Wed, 27 Jan 2010 16:39:37 GMT

Thanks for the feedback, Simon.

For starters, I should point out that the new audit persists the data completely differently as well. Part of the problem with the old data storage was the inability to persist arbitrary data (so important for a generic auditing mechanism) and the inability to efficiently search the data; the latter was missing completely.

Tables: http://wiki.alfresco.com/wiki/Auditing_%28from_V3.2r%29#Architecture
Logging: http://wiki.alfresco.com/wiki/Auditing_%28from_V3.2r%29#DEBUG_Logging

I hope that will clear things up a bit. At any rate, you should see entries appearing in alf_audit_entry. The queries to see the persisted values are somewhat complicated BUT there is a search API on AuditService.

    /**
     * Issue an audit query using the given parameters and consuming results in the callback.
     * 
     * @param callback          the callback that will handle results
     * @param parameters        the parameters for the query (may not be <tt>null</tt>)
     * @param maxResults        the maximum number of results to retrieve (zero or negative to ignore)
     * 
     * @since 3.3
     */
    void auditQuery(AuditQueryCallback callback, AuditQueryParameters parameters, int maxResults);
‍‍‍‍‍‍‍‍‍‍‍

That should say "@since 3.2", though 😞

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

evgenyww — Fri, 26 Feb 2010 12:55:41 GMT

I had the same problem and what I have discovered about new auditing mechanism (correct me if I'm wrong somewhere):
1. though auditConfig.xml is read by alfresco it is not used anymore
2. auditing is configured mostly in alfresco-audit-repository.xml. Here you should set patches to services that you want to audit

My alfresco-audit-repository.xml:


    <DataExtractors>
       <DataExtractor name="simpleValue" class="org.alfresco.repo.audit.extractor.SimpleValueDataExtractor"/>
    </DataExtractors>

    <DataGenerators>
       <DataGenerator name="transactionId" class="org.alfresco.repo.audit.generator.TransactionIdDataGenerator"/>
    </DataGenerators>

    <PathMappings>
        <PathMap source="/alfresco-api" target="/alfresco-api"/>
    </PathMappings>

    <Application name="Alfresco Api" key="alfresco-api">
        <AuditPath key="post">
            <GenerateValue key="txn" dataGenerator="transactionId"/>
            <AuditPath key="NodeService">
                <AuditPath key="createNode">
                    <AuditPath key="result">
                        <RecordValue key="value" dataExtractor="simpleValue"/>
                    </AuditPath>
                </AuditPath>
            </AuditPath>
        </AuditPath>
    </Application>

‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

This configuration means that I want to register all requests to /alfresco-api/post/NodeService/createNode/result
1. Every "AuditPath" key is a section in the service path
2. Most requests starts by "/alfresco-api/". To find exact service path that you need to audit set breakpoint in AuditComponentImp in the method "audit" at the line


        // Generate data
        Map<String, DataGenerator> generators = application.getDataGenerators(values.keySet());
‍‍‍‍

and watch the values passed to this method.
3. service path is case sensitive
4. path should be fully defined in Application: it means that in my case /alfresco-api/post/NodeService/createNode/xxx won't be registered
5. created auditing items are stored in the table "alf_audit_entry"

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

derek — Fri, 26 Feb 2010 13:18:47 GMT

Hi,

You would not modify the internal audit file or any other audit config file. Rather, define your own and load it in e.g.:


    <bean id="auditModel.mine" class="org.alfresco.repo.audit.model.AuditModelReader">
        <property name="auditModelUrl">
           <value>classpath:alfresco/extension/alfresco-audit-mine.xml</value>
        </property>
        <property name="auditModelRegistry" ref="auditModel.modelRegistry"/>
    </bean>‍‍‍‍‍‍‍

Your config file must define a new application e.g.:


    <PathMappings>
        <PathMap source="/alfresco-api" target="/mine"/>
    </PathMappings>

    <Application name="Mine" key="mine">
        <AuditPath key="post">
            <GenerateValue key="txn" dataGenerator="transactionId"/>
            <AuditPath key="NodeService">
                <AuditPath key="createNode">
                    <AuditPath key="result">
                        <RecordValue key="value" dataExtractor="simpleValue"/>
                    </AuditPath>
                </AuditPath>
            </AuditPath>
        </AuditPath>
    </Application>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Data producers can produce data against any path (hence the need to remap). The AuditMethodInterceptor's JavaDoc gives details on what it produces.

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

fgruska — Thu, 18 Mar 2010 21:23:41 GMT

Hello,
Not sure if there is a easy way to configure an eventually view audit data.
Can I do this by just changing the global properties? IWhat needs to be done to view any audit logs (e.g. similar to the template in pre 3.2).

Any help is very much appreciated.

Thank, Frank

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

evgenyww — Thu, 18 Mar 2010 21:37:00 GMT

If you set useNewConfig to false you'll activate old variant of auditing:


audit.enabled=true
audit.useNewConfig=false
‍‍‍‍

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

pchoe — Mon, 05 Apr 2010 19:06:12 GMT

I have been trying to get auditing to work on Alfresco Enterprise 3.2. I tried following the outline in this thread as well as http://aboutalfresco.blogspot.com/2009/12/audit-configuration-in-alfresco.html. But I don't see any audit when I create new content (node). I do see logging in the alf_audit_fact table in the database for AuthenticationService.getNewTicket.

Listed are the configuration files for auditing

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>

<beans>    
    <!– The configuration of the audit model –>
    
    <bean id="auditConfiguration" class="org.alfresco.repo.audit.AuditConfigurationImpl">
        <property name="config">
            <value>alfresco/extension/auditConfig.xml</value>
        </property>
    </bean>    

    <bean id="auditModel.custom" class="org.alfresco.repo.audit.model.AuditModelReader">
        <property name="auditModelUrl">
           <value>classpath:alfresco/extension/custom-alfresco-audit-repository.xml</value>
        </property>
        <property name="auditModelRegistry" ref="auditModel.modelRegistry"/>
    </bean>
</beans>
‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

<?xml version='1.0' encoding='UTF-8'?>

<!– Default Audit Configuration –>

<Audit xmlns="http://www.alfresco.org/model/audit/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" enabled="true" auditInternal="true" mode="all">
    
    <!–                –>
    <!– Global options –>
    <!–                –>
    
    <!– Do not record any additional information –>
    
    <RecordOptions>
        <recordPath>true</recordPath>
        <recordFilters>true</recordFilters>
        <recordSerializedReturnValue>true</recordSerializedReturnValue>
        <recordSerializedExceptions>true</recordSerializedExceptions>
        <recordSerializedMethodArguments>true</recordSerializedMethodArguments>
        <recordSerializedKeyPropertiesBeforeInvocation>true</recordSerializedKeyPropertiesBeforeInvocation>
        <recordSerializedKeyPropertiesAferInvocation>true</recordSerializedKeyPropertiesAferInvocation>
    </RecordOptions>
    
    <!–                          –>
    <!– Specific service options –>
    <!–                          –>
    
    <Service name="ServiceRegistry" mode="none" enabled="true"/>
    
    <!– The action service –>
    
    <Service name="ActionService" mode="none">
        <Method name="executeAction" mode="all" auditInternal="true"/>
        <Method name="saveAction" mode="all"/>
        <Method name="removeAction" mode="all"/>
        <Method name="removeAllActions" mode="all"/>
    </Service>
    
    <!– The COCI Service –>
    
    <Service name="CheckoutCheckinService">
        <Method name="getWorkingCopy" mode="none"/>
    </Service>
    
    <!– The DictionaryService –>
    <!– There are no audtiable methods in the data dictionary service –>
    <Service name="DictionaryService" mode="none" enabled="true"/>
    
    <!– The Lock Service –>
    
    <Service name="LockService">
        <Method name="getLockStatus" mode="none"/>
        <Method name="getLockType" mode="none"/>
        <Method name="getLocks" mode="none"/>
    </Service>
    
    <!– The File/Folder Service –>
    
    <Service name="FileFolderService" mode="none">
        <Method name="rename" mode="all"/>
        <Method name="move" mode="all"/>
        <Method name="copy" mode="all" auditInternal="true"/>
        <Method name="create" mode="all"/>
        <Method name="delete" mode="all"/>
        <Method name="makeFolders" mode="all"/>
        <Method name="getWriter" mode="all"/>
    </Service>
    
    <Service name="ContentService" mode="none">
        <Method name="getWriter" mode="all"/>
        <Method name="transform" mode="all"/>
    </Service>
    
    <Service name="CopyService" mode="none">
        <Method name="copy" mode="all" auditInternal="true"/>
    </Service>
    
    <!– The MimetypeService –>
    <!– There are no audtiable methods in the mime type service –>
    <Service name="MimetypeService" mode="none" enabled="false"/>
    
<!– The ContentFilterLanguagesService –>
    <Service name="ContentFilterLanguagesService" mode="none" >
        <Method name="getFilterLanguages" mode="all"/>
        <Method name="getMissingLanguages" mode="all"/>
        <Method name="getDefaultLanguage" mode="all"/>
    </Service>
    <Service name="NodeService" mode="none">
        <Method name="createStore" mode="all"/>
        <Method name="createNode" mode="all"/>
        <Method name="moveNode" mode="all"/>
        <Method name="setChildAssociationIndex" mode="all"/>
        <Method name="setType" mode="all"/>
        <Method name="addAspect" mode="all"/>
        <Method name="removeAspect" mode="all"/>
        <Method name="deleteNode" mode="all"/>
        <Method name="addChild" mode="all"/>
        <Method name="removeChild" mode="all"/>
        <Method name="setProperties" mode="all"/>
        <Method name="setProperty" mode="all"/>
        <Method name="createAssociation" mode="all"/>
        <Method name="removeAssociation" mode="all"/>
        <Method name="restoreNode" mode="all"/>
    </Service>
    
    <Service name="ScriptService" auditInternal="true"/>
    
    <Service name="TemplateService" auditInternal="true">
        <Method name="getTemplateProcessor" mode="none"/>
    </Service>
    
    <Service name="RuleService" mode="none" auditInternal="true">
        <Method name="disableRules" mode="all"/>
        <Method name="enableRules" mode="all"/>
        <Method name="disableRule" mode="all"/>
        <Method name="enableRule" mode="all"/>
        <Method name="createRule" mode="all"/>
        <Method name="saveRule" mode="all"/>
        <Method name="removeRule" mode="all"/>
        <Method name="removeAllRules" mode="all"/>
    </Service>
    
    <Service name="CategoryService" mode="none">
        <Method name="createClassifiction" mode="all"/>
        <Method name="createRootCategory" mode="all"/>
        <Method name="createCategory" mode="all"/>
        <Method name="deleteClassification" mode="all"/>
        <Method name="deleteCategory" mode="all"/>
    </Service>
    
    <Service name="SearchService" mode="none" enabled="true"/>
    
    <Service name="AuthenticationService" mode="none">
        <Method name="createAuthentication" mode="all"/>
        <Method name="updateAuthentication" mode="all"/>
        <Method name="setAuthentication" mode="all"/>
        <Method name="deleteAuthentication" mode="all"/>
        <Method name="setAuthenticationEnabled" mode="all"/>
        <Method name="authenticate" mode="all" auditInternal="true"/>
        <Method name="authenticateAsGuest" mode="all"/>
        <Method name="authenticationExists" mode="all"/>
        <Method name="invalidateUserSession" mode="all"/>
        <Method name="invalidateTicket" mode="all"/>
        <Method name="validate" mode="all"/>
        <Method name="clearCurrentSecurityContext" mode="all"/>
        <!– audit the creation of new tickets to follow SSO –>
        <Method name="getNewTicket" mode="all" />
        <Method name="getCurrentTicket" mode="none" auditInternal="true"/>
    </Service>
    
    <Service name="AuthorityService" mode="none">
        <Method name="createAuthority" mode="all"/>
        <Method name="addAuthority" mode="all"/>
        <Method name="removeAuthority" mode="all"/>
        <Method name="deleteAuthority" mode="all"/>
    </Service>
    
    <Service name="OwnableService" mode="none">
        <Method name="setOwner" mode="all"/>
        <Method name="takeOwnership" mode="all"/>
    </Service>
    
    <Service name="PermissionService" mode="none">
        <Method name="deletePermissions" mode="all"/>
        <Method name="clearPermission" mode="all"/>
        <Method name="deletePermission" mode="all"/>
        <Method name="setPermission" mode="all"/>
        <Method name="setInheritParentPermissions" mode="all"/>
    </Service>
    
    <Service name="PersonService" mode="none">
        <Method name="setCreateMissingPeople" mode="all"/>
        <Method name="setPersonProperties" mode="all"/>
        <Method name="createPerson" mode="all"/>
        <Method name="deletePerson" mode="all"/>
    </Service>
    
    <Service name="VersionService" mode="none">
        <Method name="createVersion" mode="all"/>
        <Method name="revert" mode="all"/>
        <Method name="restore" mode="all"/>
        <Method name="deleteVersionHistory" mode="all"/>
    </Service>
    
    <Service name="ExporterService"/>
    
    <Service name="ImporterService"/>
    
    <Service name="RepositoryExporterService"/>
    
    <Service name="DescriptorService" mode="none" enabled="true"/>
    
    <Service name="LicenseService" mode="none" enabled="true"/>
    
    <Service name="NamespaceService" mode="none" enabled="true"/>
    
    <Service name="TransactionService" mode="none" enabled="true"/>
    
    <Service name="WorkflowService" auditInternal="true">
        <Method name="isDefinitionDeployed" mode="none"/>
        <Method name="getDefinitions" mode="none"/>
        <Method name="getDefinitionById" mode="none"/>
        <Method name="getDefinitionByName" mode="none"/>
        <Method name="getActiveWorkflows" mode="none"/>
        <Method name="getWorkflowPaths" mode="none"/>
        <Method name="getTasksForWorkflowPath" mode="none"/>
        <Method name="getTaskById" mode="none"/>
        <Method name="getAssignedTasks" mode="none"/>
        <Method name="getPooledTasks" mode="none"/>
    </Service>
    
</Audit>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍


<Audit xmlns="http://www.alfresco.org/repo/audit/model/3.2"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xsi:schemaLocation="http://www.alfresco.org/repo/audit/model/3.2 alfresco-audit-3.2.xsd">
   <DataExtractors>
      <DataExtractor name="simpleValue"
         class="org.alfresco.repo.audit.extractor.SimpleValueDataExtractor" />
      <!–
         <DataExtractor name="stackTrace"
         class="org.alfresco.repo.audit.extractor.StackTraceDataExtractor"/>
         <DataExtractor name="storeRootNode"
         class="org.alfresco.repo.audit.extractor.StoreRootNodeDataExtractor"/>
      –>
   </DataExtractors>

   <DataGenerators>
      <DataGenerator name="transactionId"
         class="org.alfresco.repo.audit.generator.TransactionIdDataGenerator" />
   </DataGenerators>

   <PathMappings>
      <PathMap source="/alfresco-api" target="/custom" />
   </PathMappings>

   <Application name="Custom" key="custom">
      <AuditPath key="post">
         <GenerateValue key="txn" dataGenerator="transactionId" />
         <AuditPath key="NodeService">
            <AuditPath key="createNode">
               <AuditPath key="result">
                  <RecordValue key="value" dataExtractor="simpleValue" />
               </AuditPath>
            </AuditPath>
         </AuditPath>
      </AuditPath>
   </Application>

</Audit>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

I am missing something or something not configured correctly?

I am able to programmatically set the audits

            auditService.audit("AuditLogMigration", "Audit log migration",
                  nodeRef, logs);

‍‍‍‍

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

derek — Tue, 06 Apr 2010 09:22:02 GMT

Hi,
You're mixing the pre-3.2 config with the post-3.2 config. You can still use the pre-3.2 audit if you want.
Regards

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

pchoe — Tue, 06 Apr 2010 12:32:06 GMT

Hi,
You're mixing the pre-3.2 config with the post-3.2 config. You can still use the pre-3.2 audit if you want.
Regards

i have tried what i think is the pre-3.2 config (just using the auditConfig.xml) but i still didn't get creating nodes to log.

so, the pre-3.2 config is modifying the auditConfig.xml which should define what services should get logged. And the alfresco-audit-services-context.xml which defines the location of the auditConfig.xml. And set the audit-enable=true in the alfresco-global.properties.

i have tried this minus the post 3.2 audit configuration, but the only logging that i see in the database is the authentication logging when logging in to the Alfresco web or share.

how can i find out why createNode on NodeService is not logging?

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

tgmweb — Thu, 08 Apr 2010 20:17:34 GMT

I just can't seem to get auditing working at all!

I've basically got the same config as pchoe (I copied and pasted it). I've enabled auditing, tried old/new config.

I get lots of auditing messages in the logs - but nothing in audit_fact in the database. I get entries in audit_entry, but how do I do anything with that!?

I merely want to log all getReader actions to basically record an audit every time someone accesses a document.

Could anyone give me a n00bs guide? I don't even see any audit_fact entries when logging in, checking out - nothing. I've tried everything!

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

p3d3r0s0 — Thu, 29 Apr 2010 09:25:49 GMT

Hello there, ive done these steps for audit, but i cant even get to the login screen, what am i doing wrong? Please help.

- added in C:\Alfresco\tomcat\shared\classes\alfresco-global.properties
audit.enabled=true
audit.useNewConfig=true

- changed C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\auditConfig.xml
<Audit xmlns="http://www.alfresco.org/model/audit/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" enabled="true" auditInternal="false" mode="all">

<!– The File/Folder Service –>

<Service name="FileFolderService" mode="none">
<Method name="rename" mode="all"/>
<Method name="move" mode="all"/>
<Method name="copy" mode="all" auditInternal="true"/>
<Method name="create" mode="all"/>
<Method name="delete" mode="all"/>
<Method name="makeFolders" mode="all"/>
<Method name="getWriter" mode="all"/>
<Method name="getReader" mode="all"/>
</Service>

<Service name="ContentService" mode="none">
<Method name="getWriter" mode="all"/>
<Method name="transform" mode="all"/>
<Method name="getReader" mode="all"/>
</Service>

.copied this file into extension folder.(C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\extension)

- Created C:\Alfresco\tomcat\shared\classes\alfresco\extension\custom-audit-services-context.xml and put inside
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE beans PUBLIC '-//SPRING//DTD BEAN//EN' 'http://www.springframework.org/dtd/spring-beans.dtd'>
<beans>
<!– The configuration of the audit model –>

<bean id="auditConfiguration" class="org.alfresco.repo.audit.AuditConfigurationImpl">
<property name="config">
<value>alfresco/extension/auditConfig.xml</value>
</property>
</bean>
</beans>

- in C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\log4j.properties
uncommented log4j.logger.org.alfresco.repo.audit.model=DEBUG

Best regards,
Pedro

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

derek — Thu, 29 Apr 2010 10:06:05 GMT

@Pedro

You're using the old config, which will go out of fashion in V3.4. Before we release, we'll give more detailed documentation on how to use the new config; you might be able to figure the config out before them.

Regards

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

viralshah — Mon, 28 Jun 2010 13:09:11 GMT

I have read this thread on new auditing mechanism multiple times but it is getting really confusing:

- Does one have to update the alofresco-gobal.properties or repository.properties file to enable auditing?
- Does one have to do any changes in the tomcat\webapps\alfresco\WEB-INF\classes\alfresco\audit\alfresco-audit-3.2.xsd file ?
- Does one have to do any changes in the tomcat\webapps\alfresco\WEB-INF\classes\alfresco\audit\alfresco-audit-repository.xml ?
- How to enable audit trail for some specific spaces ?
- How does one view the audit trail ? Is there any outof box mechanism ?

Can someone provide a clear list of steps to be followed to enable a basic audit trail based on the new mechanism in comm 3.2r which records say content creation, update, delete, workflow actions , Security changes and possibly sample code to view the audit trail ?

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

talija83 — Fri, 02 Jul 2010 12:12:42 GMT

It would be really nice if someone could post an example of usage of this new audit mechanism in Comm. 3.3g.

For example, I still don't understand where can we use DataExtractors. In Java code? :?:

Any help would be appreciated.

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

roberto_negrete — Mon, 26 Jul 2010 21:29:41 GMT

Hi,

I've read every link posted here and I still can't configure audit at my 3.2r. The only things is being written is the user login at alfresco. I wish to audit every move done from alfresco web client to any document or space.

somebody has already done this.

Regards.

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

andrewriver — Wed, 10 Nov 2010 16:19:11 GMT

Hi!

I need help in this topic, too…I'm using and developing on alfresco 3.4.b and there is not so much information more than the wiki http://wiki.alfresco.com/wiki/Auditing_(from_V3.4) and I just cant get it yet…

Please anyone help will be really appreciated :roll:

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

derek — Thu, 11 Nov 2010 10:28:24 GMT

Hi,
Have you worked through all the examples?

Re: New Auditing Mechanism in Ent3.2, Comm. 3.2r

andrewriver — Thu, 11 Nov 2010 15:02:29 GMT

Hi,

Well, first, I set the property audit.enabled=true in repository.properties. I dont see any change in the audit tables alf_audit*

When I use the template option in alfresco "show_audit.ftl" I get this error:

11:14:01,671 ERROR [freemarker.runtime] 

Expression document.auditTrail is undefined on line 23, column 11 in workspace://SpacesStore/22deb40e-2fdb-47c5-88c8-d3aeac9f90ac.
The problematic instruction:
———-
==> list document.auditTrail as t [on line 23, column 4 in workspace://SpacesStore/22deb40e-2fdb-47c5-88c8-d3aeac9f90ac]
———-

Java backtrace for programmers:
———-
freemarker.core.InvalidReferenceException: Expression document.auditTrail is undefined on line 23, column 11 in workspace://SpacesStore/22deb40e-2fdb-47c5-88c8-d3aeac9f90ac.
   at freemarker.core.TemplateObject.assertNonNull(TemplateObject.java:124)
   at freemarker.core.IteratorBlock.accept(IteratorBlock.java:100)
   at freemarker.core.Environment.visit(Environment.java:208)
   at freemarker.core.MixedContent.accept(MixedContent.java:92)
   at freemarker.core.Environment.visit(Environment.java:208)
   at freemarker.core.IfBlock.accept(IfBlock.java:82)
   at freemarker.core.Environment.visit(Environment.java:208)
   at freemarker.core.MixedContent.accept(MixedContent.java:92)
   at freemarker.core.Environment.visit(Environment.java:208)
   at freemarker.core.Environment.process(Environment.java:188)
   at freemarker.template.Template.process(Template.java:237)
   at org.alfresco.repo.template.FreeMarkerProcessor.process(FreeMarkerProcessor.java:197)
   at org.alfresco.repo.processor.TemplateServiceImpl.processTemplate(TemplateServiceImpl.java:175)
   at org.alfresco.repo.processor.TemplateServiceImpl.processTemplate(TemplateServiceImpl.java:105)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
   at java.lang.reflect.Method.invoke(Unknown Source)
   at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)
   at org.alfresco.repo.security.permissions.impl.AlwaysProceedMethodInterceptor.invoke(AlwaysProceedMethodInterceptor.java:34)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.audit.AuditMethodInterceptor.proceedWithAudit(AuditMethodInterceptor.java:217)
   at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:184)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy209.processTemplate(Unknown Source)
   at org.alfresco.web.ui.repo.component.template.UITemplate.encodeBegin(UITemplate.java:153)
   at javax.faces.webapp.UIComponentTag.encodeBegin(UIComponentTag.java:467)
   at javax.faces.webapp.UIComponentTag.doStartTag(UIComponentTag.java:320)
   at org.apache.jsp.jsp.content.preview_002dfile_jsp._jspx_meth_r_005ftemplate_005f0(preview_002dfile_jsp.java:250)
   at org.apache.jsp.jsp.content.preview_002dfile_jsp._jspService(preview_002dfile_jsp.java:100)
   at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:377)
   at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313)
   at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
   at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:551)
   at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:488)
   at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
   at org.apache.jsp.jsp.dialog.container_jsp._jspService(container_jsp.java:647)
   at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:377)
   at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313)
   at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
   at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
   at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
   at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
   at org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:419)
   at org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:211)
   at org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(RenderResponseExecutor.java:41)
   at org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:132)
   at javax.faces.webapp.FacesServlet.service(FacesServlet.java:140)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:104)
   at sun.reflect.GeneratedMethodAccessor525.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
   at java.lang.reflect.Method.invoke(Unknown Source)
   at org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactory$1.invoke(ChainingSubsystemProxyFactory.java:116)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy194.doFilter(Unknown Source)
   at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.alfresco.repo.web.filter.beans.NullFilter.doFilter(NullFilter.java:68)
   at sun.reflect.GeneratedMethodAccessor525.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
   at java.lang.reflect.Method.invoke(Unknown Source)
   at org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactory$1.invoke(ChainingSubsystemProxyFactory.java:116)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy194.doFilter(Unknown Source)
   at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:58)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
   at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
   at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
   at java.lang.Thread.run(Unknown Source)
11:14:01,671 ERROR [org.alfresco.web.ui.common.Utils] 10100033 Error during processing of the template 'Expression document.auditTrail is undefined on line 23, column 11 in workspace://SpacesStore/22deb40e-2fdb-47c5-88c8-d3aeac9f90ac.'. Please contact your system administrator.
org.alfresco.service.cmr.repository.TemplateException: 10100033 Error during processing of the template 'Expression document.auditTrail is undefined on line 23, column 11 in workspace://SpacesStore/22deb40e-2fdb-47c5-88c8-d3aeac9f90ac.'. Please contact your system administrator.
   at org.alfresco.repo.template.FreeMarkerProcessor.process(FreeMarkerProcessor.java:201)
   at org.alfresco.repo.processor.TemplateServiceImpl.processTemplate(TemplateServiceImpl.java:175)
   at org.alfresco.repo.processor.TemplateServiceImpl.processTemplate(TemplateServiceImpl.java:105)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
   at java.lang.reflect.Method.invoke(Unknown Source)
   at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150)
   at org.alfresco.repo.security.permissions.impl.AlwaysProceedMethodInterceptor.invoke(AlwaysProceedMethodInterceptor.java:34)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.audit.AuditMethodInterceptor.proceedWithAudit(AuditMethodInterceptor.java:217)
   at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:184)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy209.processTemplate(Unknown Source)
   at org.alfresco.web.ui.repo.component.template.UITemplate.encodeBegin(UITemplate.java:153)
   at javax.faces.webapp.UIComponentTag.encodeBegin(UIComponentTag.java:467)
   at javax.faces.webapp.UIComponentTag.doStartTag(UIComponentTag.java:320)
   at org.apache.jsp.jsp.content.preview_002dfile_jsp._jspx_meth_r_005ftemplate_005f0(preview_002dfile_jsp.java:250)
   at org.apache.jsp.jsp.content.preview_002dfile_jsp._jspService(preview_002dfile_jsp.java:100)
   at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:377)
   at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313)
   at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
   at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:551)
   at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:488)
   at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:968)
   at org.apache.jsp.jsp.dialog.container_jsp._jspService(container_jsp.java:647)
   at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:377)
   at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313)
   at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
   at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
   at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
   at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
   at org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:419)
   at org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:211)
   at org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(RenderResponseExecutor.java:41)
   at org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:132)
   at javax.faces.webapp.FacesServlet.service(FacesServlet.java:140)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.alfresco.web.app.servlet.AuthenticationFilter.doFilter(AuthenticationFilter.java:104)
   at sun.reflect.GeneratedMethodAccessor525.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
   at java.lang.reflect.Method.invoke(Unknown Source)
   at org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactory$1.invoke(ChainingSubsystemProxyFactory.java:116)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy194.doFilter(Unknown Source)
   at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.alfresco.repo.web.filter.beans.NullFilter.doFilter(NullFilter.java:68)
   at sun.reflect.GeneratedMethodAccessor525.invoke(Unknown Source)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
   at java.lang.reflect.Method.invoke(Unknown Source)
   at org.alfresco.repo.management.subsystems.ChainingSubsystemProxyFactory$1.invoke(ChainingSubsystemProxyFactory.java:116)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy194.doFilter(Unknown Source)
   at org.alfresco.repo.web.filter.beans.BeanProxyFilter.doFilter(BeanProxyFilter.java:82)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:58)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
   at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
   at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
   at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
   at java.lang.Thread.run(Unknown Source)
Caused by: freemarker.core.InvalidReferenceException: Expression document.auditTrail is undefined on line 23, column 11 in workspace://SpacesStore/22deb40e-2fdb-47c5-88c8-d3aeac9f90ac.
   at freemarker.core.TemplateObject.assertNonNull(TemplateObject.java:124)
   at freemarker.core.IteratorBlock.accept(IteratorBlock.java:100)
   at freemarker.core.Environment.visit(Environment.java:208)
   at freemarker.core.MixedContent.accept(MixedContent.java:92)
   at freemarker.core.Environment.visit(Environment.java:208)
   at freemarker.core.IfBlock.accept(IfBlock.java:82)
   at freemarker.core.Environment.visit(Environment.java:208)
   at freemarker.core.MixedContent.accept(MixedContent.java:92)
   at freemarker.core.Environment.visit(Environment.java:208)
   at freemarker.core.Environment.process(Environment.java:188)
   at freemarker.template.Template.process(Template.java:237)
   at org.alfresco.repo.template.FreeMarkerProcessor.process(FreeMarkerProcessor.java:197)
   … 93 more‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

So if you know any step that I missed, or you have any example or tip, please let me know

Thanks!