Database auditing involves observing a database so as to be aware of the actions of database users.

learn more… | top users | synonyms (4)

9
votes
3answers
1k views

Find the identity of the client firing a query in SQL Server without using triggers?

I'm currently using Change Data Capture (CDC) to track data changes, and I wish to track the host name and IP address of the client submitting the query that made the changes. If there are 5 different ...
3
votes
0answers
117 views

How can I generated a list of all DB2 Objects including Last Modified Date of object on AS400? [closed]

I am going through an audit, of an AS400 application. AS400 has a DB2 database, and I need to generate a list of all DB2 Objects/Tables including their last modified date. Can anyone help me? Thanks ...
0
votes
1answer
40 views

Percona / MySQL audit log plugin - limiting the content?

I've been looking to experiment with Perconas Audit Plugin, as it sounds like it could be potentially very useful. However it appears that it is a very blunt (ALL or NOTHING) tool. From my ...
0
votes
0answers
22 views

Oracle 10g, Disable audit

I use oracle 10g(express) database, which I've tried to enable the auditing functionality for it. I failed (maybe not , but i couldn't see any audit information). It was some time ago, and now I want ...
0
votes
0answers
51 views

There is no option of audit in security for SQL Server 2014 .How to enable audit option for same?

Please see the below image there is no option about audit in database
0
votes
1answer
33 views

Reading audit records in Oracle

As a DBA, what is the best way to read the audit records on daily basis? Say, i'm the administrator and I would like to view the audit records made by the DBAs. I have enabled audit sys operatiosn to ...
3
votes
1answer
313 views

How to get the daily amount of committed transactions on a given MSSQL database?

The number of transactions for the current connection can be obtained with @@TRANCOUNT. How can you get a daily counter of the globally committed transactions on a given database?
1
vote
4answers
113 views

SQL Server : auditing AD Users - how can we identity AD User account from AD Groups

I would like to identity which accounts on our servers belong to AD Users. Currently, I find a plethora of accounts from users that should in fact be part of AD Groups registered on the same SQL ...
2
votes
0answers
604 views

Where can I get error messages from SQL Server Auditing?

Where can I get information about the audit process failing to start? I'm setting up auditing on my MS SQL 2014 server. I've created an AUDIT and an associated AUDIT SPECIFICATION, but when I try ...
2
votes
3answers
353 views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
5
votes
1answer
158 views

Auditing database administrator actions with SQL Server 2014 Standard

We have a requirement to audit database administrator access to customer databases - at a minimum, knowing which customer database they were accessing (and ideally why). Without upgrading to SQL ...
0
votes
1answer
1k views

Oracle audit: Only 'SESSION REC' in ACTION_NAME column

I was asked to generate a report of operations performed on certain Oracle 9i tables in a given period of time. When I query the DBA_AUDIT_TRAIL table I only get SESSION REC in the ACTION_NAME ...
0
votes
1answer
239 views

Sql Server audit could not write to the security log

I am following the training kit for 70-462(Administering Microsoft SQL Server 2012 Databases), and stuck on Auditing SQL Server instances lesson. I have created new user in domain controller, assign ...
1
vote
1answer
141 views

SQL logins Audit for SQL Server 2005/2008

For the Security Audit of SQL servers 2005/8 R2, We are looking for a method which can list us SQL accounts which have not changed password for last X days. For a single login we can do it via ...
0
votes
1answer
119 views

How to Audit 2 or more SQL Logins (server principals) using SQL Server Audit

I need to audit the few SQL Server Logins, I have used filters while creating Server Audit by using CREATE SERVER AUDIT [audit123] TO FILE ( FILEPATH = N'D:\' ,MAXSIZE = 2048 MB ...
0
votes
2answers
574 views

How to list all past remote login information

Instead of using "Remote Desktop" for connecting to SQL Server, I and my co-workers are using SQL Server Management Studio to apply changes to the remote server (each user has their own credentials). ...
0
votes
0answers
360 views

MySQL Script to automate creation of audit (history) tables and triggers?

For regulatory and fraud requirements, we need to record every change to most of the tables in the DB. The way we did this very successfully with a previous project is to have a copy of each table, ...
0
votes
0answers
70 views

Auditing SQL Server 2012 [closed]

I work for the State of California. I am working on a project setting up a Data Warehouse sharing data between 3 state agencies. The Data Warehouse will be encrypted. I would like to know what are the ...
1
vote
1answer
198 views

Audit Plug-in in MYSQL 5.7.5

Following error occured while using installing MariaDB Audit Plugin Library (i.e. server_audit-1.1.8.tar.gz) in 5.7.5-m15 MySQL Community Server (GPL) in Centos release 6.5: ERROR 1126 (HY000): Can't ...
2
votes
1answer
70 views

Auditing/Logging Help

I'm working on a request to start logging some additional data for PCI compliance. I need to log who, when, and what changed on a set of tables. I set up SQL auditing which would work fine except ...
0
votes
1answer
262 views

Difference between alert log and archive log in oracle databases

I don't know anything about oracle databases. Actually I'm asking this question for my friend (He currently doesn't have access to internet!). He wanted to know that what's the difference between ...
2
votes
1answer
91 views

Investigating specific SELECT queries

For a particular row in a table how can I determine the number of reads done to it such as SELECT * FROM MyTable WHERE ID = <something> and when and where the read query executed? I'm ...
3
votes
0answers
236 views

Exclude a User From an Audit [duplicate]

I need to set up a SQL Server Audit to capture all database activity for all logins except one - the login our application runs under. In this case the login I want to exclude is CPSDOM\cpointedb. In ...
2
votes
1answer
227 views

How to programatically change the login audit settings?

Is it possible to change the login auditing settings of a SQL Server database by script, rather than through the Server Properties Security setting in the SSMS UI? I need to programatically change ...
0
votes
1answer
413 views

parsing and purpose of oracle audit (.aud) logs

I am looking at the oracle audit logs and am trying to understand and parse. The format appears to be consistent: Date Length: Action: ...etc My questions are: 1) what generates these? Is it every ...
1
vote
1answer
248 views

Find out who ran a query using transaction log backups

We have a SQL Server 2012 Enterprise database running in Full Recovery Model with transaction log backups running every minute. A query was run last night which means we need to recover data from a ...
0
votes
0answers
134 views

sys.sp_audit_write Procedure not available

I am trying to execute the audit write procedure but it can't be found. I have looked in master for it in the system procedures list and confirmed it isn't there. Does anyone know why this might be? I ...
1
vote
0answers
136 views

Auditing AS 400 DB2 library user access

As part of the testing to check for authorized users having access to applications and libraries on AS 400 systems, I need help to figure out a list of users having access to applications hosted on ...
1
vote
0answers
79 views

How To Log Select Statements from 1 User On 1 Table Into a Permanent Log Table

We have a centralized authentication library that 100+ applications use to authenticate users. That library has its own DB credentials. It would be extremely useful to log every time that library/user ...
1
vote
0answers
45 views

MySql Audit Changes from Db Admin, Security

I know that you can use triggers (before insert, update, delete) to track the changes in history tables. But this only works if the changes are made by the applications. But in some circumstance, ...
2
votes
2answers
368 views

Java Spring application Database triggers auditing - how to provide the right user that made the change

We are developing a new web application. one of the most basic requirement is to audit all entities changes into a separate table. We would like to use DB triggers for that purpose. We use MySQL as ...
2
votes
1answer
2k views

How to get index last modified time in Oracle?

Given an index name, I want to obtain its last modification time and the author of modification in Oracle 11g. Is there any query to achieve this?
0
votes
0answers
208 views

CDC auditing - Unanswered questions

EDIT: Added some comments from the stuff I was able to find out, in case future onlookers are interested. I'm completely new to CDC, and am in the process of implementing it to a large DB for the ...
0
votes
1answer
339 views

Audit DML operations on MySQL Tables

We have several MySQL 5.0 databases. We've been having security problems, like records being modified without authorization. We need to implement some kind of audit on DML operations identifying ...
0
votes
0answers
74 views

How can I enable audit on selected accounts only to know where they logged on from?

I want to audit certain DB accounts (the ones used for applications), to know which machine the user is logging on from. To save space, I don't want to enable this audit for every account in the ...
1
vote
0answers
225 views

dbms_audit_mgmt.clean_audit_trail not purging

my current database version is 11.2.0.3.0. I'm trying to purge my audit trail with a procedure. In my procedure I got this part of code: SYS.dbms_audit_mgmt.clean_audit_trail( audit_trail_type ...
5
votes
1answer
288 views

How to audit users connections via ODBC to all dbs in SQL Server 2008 R2

I am not a trained DBA, but I manage a software application that uses SQL Server for the back end. The applications manages "projects" and each project has its own database. Because of the limitation ...
2
votes
2answers
12k views

Trigger to audit table changes

I have created a trigger to audit changes to a table: CREATE TRIGGER [dbo].[iudt_AutoAuditChanges] ON dbo.CPTCategoryMaster AFTER INSERT,DELETE,UPDATE AS BEGIN SET NOCOUNT ON; ...
1
vote
1answer
58 views

How to recreate a SQL Server audit without an audit gap?

I have some audits and audit specifications on a SQL Server 2012 instance and I want to reapply the audit and audit spec definition every evening in case the DBAs change it. I have measured the time ...
2
votes
1answer
2k views

SQL Server Audit Specification - filter DML by all but one user

I'm setting up a database audit. I'd like to capture any DML change that is issued by database user other than the service account related to the application. In short, this is to prove to our ...
0
votes
4answers
489 views

How to Identify the user who issued MySQL Shutdown command

We have had several situations when our production MySQL server suddenly became unavailable. The error log just shows "Normal shutdown" followed by the typical shutdown messages. How can I determine ...
3
votes
1answer
615 views

How to reuse an update trigger for multiple tables in postgresql?

In the database for a new project, I've started the convention of having each table have a last modified timestamp column. To implement this, I wrote a trigger for each table: CREATE TRIGGER ...
0
votes
0answers
98 views

How to analyze incoming DML in SQL Server 2005?

I have database and specifically one table that is used for batch data transfer from another organization. With each run the table is truncated and rows are re-inserted. I want to handle that process ...
2
votes
1answer
326 views

Mysql - Select To XML

I'm using a trigger to capture an audit trail. I want to convert the inserted / updated / deleted value to XML and store it in another table. My trigger look like this: DELIMITER $$ CREATE ...
10
votes
4answers
3k views

eCommerce orders table. Save prices, or use an audit/history table?

Im designing my first eCommerce schema. I've been reading around the subject for a little while, and am a bit confused about the relationship between an order_line_item and a product A product can ...
1
vote
1answer
1k views

Field Level Auditing in Oracle 11g R2

I want to enable auditing on some column in a table. I have tested the SYS, Schema and Table level auditing. Guide me or refer me some document to enable auditing on column level.
1
vote
1answer
6k views

Oracle SYS Auditing with Audit Trail to DB

I have an Oracle Database 11g R2 on Oracle Enterprise Linux. I have enabled SYS auditing as: SQL> ALTER SYSTEM SET audit_sys_operations=true SCOPE=spfile; SQL> ALTER SYSTEM SET audit_trail=OS ...
1
vote
1answer
195 views

Server audit with more than 1.000 entries

On my Mssql 2008r2 I created a server audit for all login and logout: USE MASTER GO CREATE SERVER AUDIT audit_test TO FILE (FILEPATH = 'D:\Audit') GO ...
1
vote
0answers
174 views

Is there are way to use Fine Grain Auditing to record Varray bind values?

I have an application, and would like to use Oracle's FGA (Fine Grained-Auditing) to record varray bind information. Specifically, I am using Oracle Spatial and need to know at what extent users are ...
0
votes
1answer
1k views

Audit Trail in Oracle 11gR2

I'm using Oracle 11g R2 on RHEL5. How can I find what is being audited? I want to know what actions (like create, insert, delete, update etc.) are being audited or logged for a user, say scott.