Database auditing involves observing a database so as to be aware of the actions of database users.

learn more… | top users | synonyms

4
votes
1answer
387 views

Tracking object use using SQL Auditing

I am looking for a solution to track object usage in my database. Objects such as tables, stored procedures, and functions. I discovered SQL Auditing and was under the impression that it's exactly ...
2
votes
1answer
726 views

How to Create Database Audit Specification for a column?

I am creating SQL Server 2008 R2 Database audit Specification for tblPerson.SSN I selected Audit Action Type: Update Object Class: Object Object Name: tblPerson Principal name: Public It captures ...
3
votes
3answers
143 views

How does the QUEUE_DELAY option for Server Audits work

I am working through how SQL Server Audits work and would like some clarity on how the QUEUE_DELAY options works. BOL defines the options as: Determines the time, in milliseconds, that can ...
1
vote
1answer
159 views

Reconciling dm_os_windows_info windows_sku values, gathering same info from pre SQL Server 2008 R2 instances

I'm developing an inventory system for RDBMS deployments. I'm starting with SQL Server, and later will be pulling in info for Oracle & other RDBMS deployments. When you query [dm_os_windows_info] ...
2
votes
1answer
508 views

Disabling Indexes and Auditing for large data import

Hopefully the title describes this sufficiently, but I have a process that runs and performs thousands of individual inserts and updates (nothing I can do to change that). My questions are: 1. Is it ...
3
votes
1answer
208 views

Can this be accomplished with Oracles Fine Grained Auditing?

We need to audit when a table is accessed (either select, update or delete) and I know Oracles Fine Grained Auditing can handle that. The issue we are having is that all of our users use the same ...
2
votes
1answer
634 views

How to speed up audit trigger?

The task: write a trigger to log all updates within tbl1 table for future audit users' actions. The tbl1 table: id INT(11) y SMALLINT(6) country SMALLINT(6) -- really here ~20 fields but only some ...
4
votes
3answers
790 views

Get notified when SQL Server 2008 Audit Server logs something?

I'm setting up SQL Server 2008 Audit Server to log any activities made by certain group of users of certain database. All I need to do is get notified when the Audit server logs something, so that I ...
10
votes
4answers
8k views

What is an audit table?

What are audit tables? How are they useful? I came across them reading this article.
1
vote
2answers
244 views

Data - Changes Audit Trail

What are typical scenarios where the user might require a data-change-audit-trail?
1
vote
4answers
397 views

Data Change Audit Plan

My company is changing from a distributed Access Database model to using a centralized SQL Database. The datatables were designed such that all of the tables have a modified date. In discussion it ...
1
vote
1answer
220 views

Do I trace an Active Directory group based database login the same way as an AD user based login on SQL Server?

We are currently undergoing an PwC audit on our database logins. Some of our user accounts have sysadmin privs, which of course is a major security breach. I have successfully done traces on ...
0
votes
2answers
924 views

Create an Audit trail on SQL Server 2008 to trace all privilege users

I need to create a trace of all the commands issued by members of SysAdmin or SecurityAdmin server Roles. I figured, I could use Profiler to do that but it will not comprise all the added members. I ...
5
votes
7answers
435 views

Policies RE database triggers in well-designed applications?

I've heard all kinds of horror stories around gremlins living in database triggers, and--worse--systems being brought down by the addition of a trigger that caused a chain of cascading ones. I'm ...
18
votes
3answers
26k views

How to find out who deleted some data SQL Server

My boss had a query from a customer yesterday asking how they could find out who deleted some data in their SQL Server database (it is the express edition if that matters). I thought this could be ...
8
votes
4answers
291 views

What would I need to do to make sure my DB policies have to pass a security audit?

I have an audit coming up, and I was wondering what physical, electronic, and logical access controls an auditor would look for when auditing a database for an ERP system. I'm really new to this ...
8
votes
3answers
6k views

Audit logins on MySQL database

Is there a way to audit logins to MySQL? I'd like to be able to create a username for each employee and thereby create an audit trail of logins. However, googling has turned up no good results. The ...
28
votes
7answers
836 views

How should deletions be handled in the database?

I'd like to implement an "undelete" feature in a web application such that a user can change her mind and recover a deleted record. Thoughts on how to implement this? Some options I've considered are ...