Database auditing involves observing a database so as to be aware of the actions of database users.

learn more… | top users | synonyms

2
votes
3answers
66 views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
4
votes
1answer
92 views

Auditing database administrator actions with SQL Server 2014 Standard

We have a requirement to audit database administrator access to customer databases - at a minimum, knowing which customer database they were accessing (and ideally why). Without upgrading to SQL ...
0
votes
0answers
44 views

Is there value in storing audit fields in a fact table?

I've always stored at least two basic housekeeping fields in all of my dimension and fact tables: DateCreated and DateModified. However, this adds two fairly wide (eight bytes each, in MS SQL) ...
0
votes
0answers
63 views

Only 'SESSION REC' in ACTION_NAME column

I was asked to generate a report of operations performed on certain Oracle 9i tables in a given period of time. When I query the DBA_AUDIT_TRAIL table I only get SESSION REC in the ACTION_NAME ...
1
vote
1answer
67 views

SQL logins Audit for SQL Server 2005/2008

For the Security Audit of SQL servers 2005/8 R2, We are looking for a method which can list us SQL accounts which have not changed password for last X days. For a single login we can do it via ...
0
votes
0answers
27 views

Disabling audit objects on Oracle 11

How can I disable audit objects on Oracle 11? I have tried NOAUDIT ALL; NOAUDIT NETWORK; NOAUDIT SESSION; NOAUDIT ALL ON DEFAULT; NOAUDIT SELECT INSERT UPDATE DELETE EXECUTE PROCEDURE; NOAUDIT ...
0
votes
0answers
153 views

MySQL Script to automate creation of audit (history) tables and triggers?

For regulatory and fraud requirements, we need to record every change to most of the tables in the DB. The way we did this very successfully with a previous project is to have a copy of each table, ...
0
votes
0answers
21 views

Auditing Specifications for SQL Server 2012 [duplicate]

I work for the State of California. I am working on a project setting up a Data Warehouse sharing data between 3 state agencies. The Data Warehouse will be encrypted. I would like to know what are the ...
1
vote
1answer
82 views

Audit Plug-in in MYSQL 5.7.5

Following error occured while using installing MariaDB Audit Plugin Library (i.e. server_audit-1.1.8.tar.gz) in 5.7.5-m15 MySQL Community Server (GPL) in Centos release 6.5: ERROR 1126 (HY000): Can't ...
2
votes
1answer
58 views

Auditing/Logging Help

I'm working on a request to start logging some additional data for PCI compliance. I need to log who, when, and what changed on a set of tables. I set up SQL auditing which would work fine except ...
0
votes
1answer
144 views

Difference between alert log and archive log in oracle databases

I don't know anything about oracle databases. Actually I'm asking this question for my friend (He currently doesn't have access to internet!). He wanted to know that what's the difference between ...
1
vote
1answer
74 views

Investigating specific SELECT queries

For a particular row in a table how can I determine the number of reads done to it such as SELECT * FROM MyTable WHERE ID = <something> and when and where the read query executed? I'm ...
0
votes
1answer
182 views

parsing and purpose of oracle audit (.aud) logs

I am looking at the oracle audit logs and am trying to understand and parse. The format appears to be consistent: Date Length: Action: ...etc My questions are: 1) what generates these? Is it every ...
1
vote
1answer
135 views

Find out who ran a query using transaction log backups

We have a SQL Server 2012 Enterprise database running in Full Recovery Model with transaction log backups running every minute. A query was run last night which means we need to recover data from a ...
0
votes
0answers
87 views

Problem when querying audit file when audit is enabled

I'm trying to audit DML operations for a specific principle on a database. For this, I configured Audit under Server -> Security and Database -> Database Audit Specifications and enabled both of them. ...
0
votes
0answers
65 views

sys.sp_audit_write Procedure not available

I am trying to execute the audit write procedure but it can't be found. I have looked in master for it in the system procedures list and confirmed it isn't there. Does anyone know why this might be? I ...
1
vote
0answers
74 views

Auditing AS 400 DB2 library user access

As part of the testing to check for authorized users having access to applications and libraries on AS 400 systems, I need help to figure out a list of users having access to applications hosted on ...
1
vote
0answers
49 views

How To Log Select Statements from 1 User On 1 Table Into a Permanent Log Table

We have a centralized authentication library that 100+ applications use to authenticate users. That library has its own DB credentials. It would be extremely useful to log every time that library/user ...
1
vote
0answers
32 views

MySql Audit Changes from Db Admin, Security

I know that you can use triggers (before insert, update, delete) to track the changes in history tables. But this only works if the changes are made by the applications. But in some circumstance, ...
2
votes
2answers
172 views

Java Spring application Database triggers auditing - how to provide the right user that made the change

We are developing a new web application. one of the most basic requirement is to audit all entities changes into a separate table. We would like to use DB triggers for that purpose. We use MySQL as ...
1
vote
1answer
554 views

How to get index last modified time in Oracle?

Given an index name, I want to obtain its last modification time and the author of modification in Oracle 11g. Is there any query to achieve this?
0
votes
1answer
162 views

Audit DML operations on MySQL Tables

We have several MySQL 5.0 databases. We've been having security problems, like records being modified without authorization. We need to implement some kind of audit on DML operations identifying ...
0
votes
0answers
58 views

How can I enable audit on selected accounts only to know where they logged on from?

I want to audit certain DB accounts (the ones used for applications), to know which machine the user is logging on from. To save space, I don't want to enable this audit for every account in the ...
2
votes
2answers
5k views

Trigger to audit table changes

I have created a trigger to audit changes to a table: CREATE TRIGGER [dbo].[iudt_AutoAuditChanges] ON dbo.CPTCategoryMaster AFTER INSERT,DELETE,UPDATE AS BEGIN SET NOCOUNT ON; ...
1
vote
1answer
48 views

How to recreate a SQL Server audit without an audit gap?

I have some audits and audit specifications on a SQL Server 2012 instance and I want to reapply the audit and audit spec definition every evening in case the DBAs change it. I have measured the time ...
0
votes
4answers
208 views

How to Identify the user who issued MySQL Shutdown command

We have had several situations when our production MySQL server suddenly became unavailable. The error log just shows "Normal shutdown" followed by the typical shutdown messages. How can I determine ...
3
votes
1answer
339 views

How to reuse an update trigger for multiple tables in postgresql?

In the database for a new project, I've started the convention of having each table have a last modified timestamp column. To implement this, I wrote a trigger for each table: CREATE TRIGGER ...
0
votes
0answers
64 views

How to analyze incoming DML in SQL Server 2005?

I have database and specifically one table that is used for batch data transfer from another organization. With each run the table is truncated and rows are re-inserted. I want to handle that process ...
10
votes
4answers
2k views

eCommerce orders table. Save prices, or use an audit/history table?

Im designing my first eCommerce schema. I've been reading around the subject for a little while, and am a bit confused about the relationship between an order_line_item and a product A product can ...
1
vote
1answer
717 views

Field Level Auditing in Oracle 11g R2

I want to enable auditing on some column in a table. I have tested the SYS, Schema and Table level auditing. Guide me or refer me some document to enable auditing on column level.
1
vote
1answer
125 views

Server audit with more than 1.000 entries

On my Mssql 2008r2 I created a server audit for all login and logout: USE MASTER GO CREATE SERVER AUDIT audit_test TO FILE (FILEPATH = 'D:\Audit') GO ...
0
votes
1answer
1k views

Audit Trail in Oracle 11gR2

I'm using Oracle 11g R2 on RHEL5. How can I find what is being audited? I want to know what actions (like create, insert, delete, update etc.) are being audited or logged for a user, say scott.
1
vote
1answer
1k views

Audit select queries against specified tables by specified users

I have a requirement to audit all SELECT queries (by access) against specified tables by specified users. As far as I can tell, this can't be done with normal auditing; it only supports auditing all ...
1
vote
2answers
170 views

Audit table insert restriction

So I'm trying to create my own audit table for some user management analysis and stumbled across a little problem. I use this trigger CREATE OR REPLACE TRIGGER usr_t_audit_user_alnd AFTER LOGON ...
1
vote
1answer
3k views

Can I delete SQL Server 2008 R2 “audittrace” (.trc) files

This is precaution question :) When I was configuring SQL Server 2008 R2 database engine, I checked "Enable C2 audits" which I don't really need. From that time it created a lot of files like ...
3
votes
3answers
3k views

How to know the user doing a delete action on an audit table, when using a shared login?

Background information: I'm creating a collection of audit tables to keep track of updates and deletes to a set of data tables for my app. Audit records are created via triggers. DML in my app's ...
1
vote
1answer
1k views

Server Wide DDL Trigger Permissions Issue

I am trying to implement a server wide DDL Trigger that will audit the DDL changes across the databases on the server using script very similar to the article found here The trigger will log the DDL ...
1
vote
1answer
176 views

How big should I make a column in an audit table for storing the output of COLUMNS_UPDATED()?

I have a stored procedure which creates a complementary trigger and audit table when a table name is passed into it. The SP filters out all the calculated columns and other stuff that stops you doing ...
2
votes
0answers
476 views

Audit Queries in SQL Server 2008 Including Start Stop Times

I have SQL Server 2008 Enterprise. I know how to set up auditing on the SQL Server, but it looks like the audit logs don't include query start/stop times. We currently use a product called Splunk to ...
2
votes
2answers
276 views

How do I maintain more audit history?

I created a SQL Server audit and when I view the audit logs I only see today’s audit. I am saving it to a file and I want to store audit for one year. Is there a way to store database and server audit ...
0
votes
3answers
92 views

Access to tables in SQL Server

I would like to know if there is a table where accesses to tables are saved, per user or per system. I'm using both SQL Server 2005 and 2008.
1
vote
0answers
335 views

Auditing access to a linked server

I have a linked server with SQL Server configured with the security option "For a login not defined in the above list, connections will: Be made using the login's current security context". What I ...
1
vote
1answer
784 views

Role audit in Oracle 10g

Is it possible with Oracle auditing to find out if the role can be revoked from particular user without loosing any privileges that he actually uses? Something like AUDIT webadmin_role BY webapp_user ...
2
votes
1answer
47 views

Audit full text activity

I need to find when and which user created full text catalog, and who added/modified/deleted the columns (that were full text indexed) in that full text catalog.
4
votes
3answers
2k views

Auditing specific database events

For auditing purposes, we have a requirement in which we have to enable Auditing for theses events: DBA Logins Changes made by DBAs LIKE INSERT, DELETE, UPDATE, ALTER (etc.) Changes made by our ...
3
votes
5answers
4k views

Trigger Performance : Is Using Trigger is a good way?

We are using SQL Server 2008 for a j2ee web application. I need to maintains the audits for updates for each column with their previous value and new value on one of my table which is very heavy, ...
1
vote
0answers
191 views

how can Audit All Login To SQL Server BY ODBC Connection

I MAke Report By Access Form On SQL database I make ODBC Connection For login To Update the data From Database Now I want Audit All logins To know who make Update today Or who make Update Now ? ...
1
vote
1answer
421 views

Find who and when changed a specific value in the database

We recent found some record in a table of an oracle database has been updated to another value.and it has been cause very important mistake. we want to find out who and when has done this? could ...
-4
votes
3answers
2k views

How database administrators can see my requests to SQL Server?

I'm a SQL Server 2008 user. I have access to some tables. I need to request few columns from table as I usually do. But I need to do it once (for example) in 5 seconds and system administrators ...
2
votes
1answer
2k views

Enabling/disabling/changing Oracle auditing without a shutdown?

I have a large database that needs auditing on a very detailed level (every select, update, insert, and delete, along with the actual text of the statement) for about half the users. I know how to do ...