Database auditing involves observing a database so as to be aware of the actions of database users.

learn more… | top users | synonyms (4)

2
votes
2answers
401 views

How do I maintain more audit history?

I created a SQL Server audit and when I view the audit logs I only see today’s audit. I am saving it to a file and I want to store audit for one year. Is there a way to store database and server audit ...
2
votes
1answer
790 views

The best way to log access to SSRS reports

We have a number of SSRS reports created using BIDS 2008 on SQL Server 2008 r2. The business wants us to log access to these reports. For example who and when run the Report A. What is the best way ...
2
votes
1answer
840 views

Disabling Indexes and Auditing for large data import

Hopefully the title describes this sufficiently, but I have a process that runs and performs thousands of individual inserts and updates (nothing I can do to change that). My questions are: 1. Is it ...
2
votes
1answer
242 views

How to audit all DML operations on a SQL Server 2008 R2 database

In order to assess options of implementing indexed views, I want to check the usage of DML operations of the tables. The database is new to me as well as the relevant business knowledge, so I just ...
2
votes
3answers
419 views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
2
votes
1answer
249 views

How to programatically change the login audit settings?

Is it possible to change the login auditing settings of a SQL Server database by script, rather than through the Server Properties Security setting in the SSMS UI? I need to programatically change ...
2
votes
1answer
2k views

How to get index last modified time in Oracle?

Given an index name, I want to obtain its last modification time and the author of modification in Oracle 11g. Is there any query to achieve this?
2
votes
1answer
1k views

How to Create Database Audit Specification for a column?

I am creating SQL Server 2008 R2 Database audit Specification for tblPerson.SSN I selected Audit Action Type: Update Object Class: Object Object Name: tblPerson Principal name: Public It captures ...
2
votes
1answer
292 views

Do I trace an Active Directory group based database login the same way as an AD user based login on SQL Server?

We are currently undergoing an PwC audit on our database logins. Some of our user accounts have sysadmin privs, which of course is a major security breach. I have successfully done traces on ...
2
votes
1answer
2k views

SQL Server Audit Specification - filter DML by all but one user

I'm setting up a database audit. I'd like to capture any DML change that is issued by database user other than the service account related to the application. In short, this is to prove to our ...
2
votes
1answer
342 views

Mysql - Select To XML

I'm using a trigger to capture an audit trail. I want to convert the inserted / updated / deleted value to XML and store it in another table. My trigger look like this: DELIMITER $$ CREATE ...
2
votes
1answer
51 views

Audit full text activity

I need to find when and which user created full text catalog, and who added/modified/deleted the columns (that were full text indexed) in that full text catalog.
2
votes
1answer
3k views

Archiving fga_log$: sys.dbms_audit_mgmt.clean_audit_trail doesn't delete anything

I am having a problem to archive and then delete portions of the fga_log$ table. Here's what a script basically does insert into fga_log_archive select ... from sys.fga_log$; begin sys....
2
votes
1answer
1k views

Inherit audit columns and triggers

Background I have a database with dozens of tables, some of which should have audit columns. Problem I'd like to avoid the drudgery of creating audit columns manually, and write the update and ...
2
votes
1answer
165 views

Audit tables in different databases

I am studying ways to implement audit tables to my PostgreSQL database and would like to know if it is possible to make a trigger for the data to be written to a table in a database other than the ...
2
votes
1answer
2k views

hstore for versioning fields in postgresql

I have a postgresql database that will hold about 50 tables, each of them having about 15 fields, it would have at least 300.000 rows on each table. In order to track the changes done on each field I ...
2
votes
0answers
737 views

Where can I get error messages from SQL Server Auditing?

Where can I get information about the audit process failing to start? I'm setting up auditing on my MS SQL 2014 server. I've created an AUDIT and an associated AUDIT SPECIFICATION, but when I try ...
2
votes
2answers
398 views

Java Spring application Database triggers auditing - how to provide the right user that made the change

We are developing a new web application. one of the most basic requirement is to audit all entities changes into a separate table. We would like to use DB triggers for that purpose. We use MySQL as ...
2
votes
0answers
584 views

Audit Queries in SQL Server 2008 Including Start Stop Times

I have SQL Server 2008 Enterprise. I know how to set up auditing on the SQL Server, but it looks like the audit logs don't include query start/stop times. We currently use a product called Splunk to ...
2
votes
0answers
518 views

Auditing access to a linked server

I have a linked server with SQL Server configured with the security option "For a login not defined in the above list, connections will: Be made using the login's current security context". What I ...
2
votes
2answers
900 views

How to speed up audit trigger?

The task: write a trigger to log all updates within tbl1 table for future audit users' actions. The tbl1 table: id INT(11) y SMALLINT(6) country SMALLINT(6) -- really here ~20 fields but only some ...
1
vote
1answer
191 views

how to get History of queries executed with username in SQL

I can get executed queries by using: SELECT deqs.last_execution_time AS [Time] ,dest.TEXT AS [Query] FROM sys.dm_exec_query_stats AS deqs CROSS APPLY sys.dm_exec_sql_text(deqs.sql_handle) AS dest ...
1
vote
2answers
290 views

Data - Changes Audit Trail

What are typical scenarios where the user might require a data-change-audit-trail?
1
vote
1answer
933 views

Find who and when changed a specific value in the database

We recent found some record in a table of an oracle database has been updated to another value.and it has been cause very important mistake. we want to find out who and when has done this? could ...
1
vote
2answers
6k views

How to find DELETE and UPDATE statements that have been executed on a database?

I am trying to find out what delete and update statements have been executed on a certain database in a certain period of time. I came across this following query, but it generates an error message: ...
1
vote
1answer
1k views

Audit Logins on PostgreSQL 9.0

I have setup a script, created from various links on the web to trace activity in a table using a trigger. /* Create the MinUser Table */ CREATE TABLE MinUser ( User_Id int NOT NULL ...
1
vote
1answer
33 views

In Oracle DB 11.2g, is it possible for the audit trail to explicitly mention account locking events?

As it is, the audit trail will show login failures, and an attempt to log into a locked account (ORA-01017 and ORA-28000). What I would like to know is if it's possible for it to make a mention when ...
1
vote
1answer
127 views

Mysql triggers for auditing

We have a requirement to fulfill - we need an auditing table for all of our entities. We wonder if creating the following triggers will be a good practice: CREATE DEFINER=`root`@`localhost` TRIGGER `...
1
vote
1answer
58 views

How to recreate a SQL Server audit without an audit gap?

I have some audits and audit specifications on a SQL Server 2012 instance and I want to reapply the audit and audit spec definition every evening in case the DBAs change it. I have measured the time ...
1
vote
1answer
39 views

Oracle 12 - Reporting on Roles

Is there a way to report on all the custom roles and/or responsibilities created within Oracle, Outside of SQL? I am looking for a dashboard that shows how many have x role, y role that could be ...
1
vote
1answer
249 views

Find out who ran a query using transaction log backups

We have a SQL Server 2012 Enterprise database running in Full Recovery Model with transaction log backups running every minute. A query was run last night which means we need to recover data from a ...
1
vote
1answer
1k views

Field Level Auditing in Oracle 11g R2

I want to enable auditing on some column in a table. I have tested the SYS, Schema and Table level auditing. Guide me or refer me some document to enable auditing on column level.
1
vote
1answer
1k views

Audit select queries against specified tables by specified users

I have a requirement to audit all SELECT queries (by access) against specified tables by specified users. As far as I can tell, this can't be done with normal auditing; it only supports auditing all ...
1
vote
1answer
2k views

Server Wide DDL Trigger Permissions Issue

I am trying to implement a server wide DDL Trigger that will audit the DDL changes across the databases on the server using script very similar to the article found here The trigger will log the DDL ...
1
vote
1answer
204 views

How big should I make a column in an audit table for storing the output of COLUMNS_UPDATED()?

I have a stored procedure which creates a complementary trigger and audit table when a table name is passed into it. The SP filters out all the calculated columns and other stuff that stops you doing ...
1
vote
1answer
66 views

How to distinguish the current operation is done from system or from sql server management studio

We want to record who insert or update a table, so we add "CreatedBy" and "ModifiedBy" columns. When the data is changed through the application, we can easily get the person. But when someone uses ...
1
vote
1answer
1k views

Audit 'sa' login in SQL Server 2005

I have a requirement where I need to audit (and potentially be notified) whenever the 'sa' user account logs into an SQL Server 2005 instance. Additionally, there is a preference that the database ...
1
vote
1answer
40 views

SQL Server Audit not tracking changes at the database level

I'm currently trying to create a test implementation of SQL Server Audit in SQL Server Management Studio to see how it works. I created an test audit at the server level, and another one at the ...
1
vote
1answer
69 views

Database agnostic auditing [duplicate]

Background Various databases have custom implementations for auditing: SQL Server Audit Oracle Audit PostgreSQL Audit Trigger MySQL Enterprise Audit Problem A number of problems exist: There ...
1
vote
1answer
50 views

Triggers on Slave database (in the context of replication) for auditing purpose in MySQL

I have a requirement for auditing in MySQL database. It means I am interested in what data is changed in my database and when. For fulfilling this requirement I am thinking about the triggers. I am ...
1
vote
1answer
89 views

Auditing DDL with MySQL

We have a MySQL database on an IBM i (as/400) that has many people with admin access. We would like to audit who is making changes, and when they are made. On SQL Server we would use DDL Triggers, but ...
1
vote
4answers
129 views

SQL Server : auditing AD Users - how can we identity AD User account from AD Groups

I would like to identity which accounts on our servers belong to AD Users. Currently, I find a plethora of accounts from users that should in fact be part of AD Groups registered on the same SQL ...
1
vote
1answer
149 views

SQL logins Audit for SQL Server 2005/2008

For the Security Audit of SQL servers 2005/8 R2, We are looking for a method which can list us SQL accounts which have not changed password for last X days. For a single login we can do it via ...
1
vote
1answer
228 views

Audit Plug-in in MYSQL 5.7.5

Following error occured while using installing MariaDB Audit Plugin Library (i.e. server_audit-1.1.8.tar.gz) in 5.7.5-m15 MySQL Community Server (GPL) in Centos release 6.5: ERROR 1126 (HY000): Can't ...
1
vote
1answer
205 views

Server audit with more than 1.000 entries

On my Mssql 2008r2 I created a server audit for all login and logout: USE MASTER GO CREATE SERVER AUDIT audit_test TO FILE (FILEPATH = 'D:\Audit') GO ...
1
vote
1answer
4k views

Can I delete SQL Server 2008 R2 “audittrace” (.trc) files

This is precaution question :) When I was configuring SQL Server 2008 R2 database engine, I checked "Enable C2 audits" which I don't really need. From that time it created a lot of files like ...
1
vote
1answer
1k views

What are some good methods of structuring a MySQL audit trail to be both immutable, and perform well for usage?

In one application, we have an audit table that uses the ArchiveEngine in conjunction with a few triggers to capture 100% of the changes that occur. The upside to this is that 20+ million rows ...
1
vote
1answer
29 views

Statement specific auditing - Oracle

I have enabled default auditing in one of my database. Oracle 11g. Audit_trail is set to DB, other than that for a particular schema 'test' I have set: audit all on test by access With the above ...
1
vote
0answers
43 views

How unique does AUDIT_GUID need to be when creating a server audit?

When you use the GUI to create a server audit it creates a password worthy (no caps) value like e5abe6c5-f451-41f3-936c-b1da1c0786ce When you look to CREATE SERVER AUDIT with Transact-SQL it ...
1
vote
0answers
33 views

Tracking MySQL DML Operations Source

We have a table that will get inserts and updates from 10 different jobs. We need to track each DML operation with its source i.e job name. We have used audit tables and triggers to get old and new ...