Database auditing involves observing a database so as to be aware of the actions of database users.

learn more… | top users | synonyms (4)

0
votes
2answers
34 views

Can I tell if a stored procedure has executed against a particular database?

As a result of a release a db is behaving "unusually". I suspect a stored procedure was missed during release, but my dba is telling me 100% it was executed. Is there any way to definitively prove ...
2
votes
1answer
188 views

Determe the command type in a DDL trigger / get names and datatypes of new columns

Given strings corresponding to DDL commands, how can I determine which DDL command (column addition, constraint addition etc.) it precisely is? I have a DDL trigger on a database that will be fired ...
3
votes
2answers
12k views

Trigger to audit table changes

I have created a trigger to audit changes to a table: CREATE TRIGGER [dbo].[iudt_AutoAuditChanges] ON dbo.CPTCategoryMaster AFTER INSERT,DELETE,UPDATE AS BEGIN SET NOCOUNT ON; ...
0
votes
1answer
132 views

How to Audit 2 or more SQL Logins (server principals) using SQL Server Audit

I need to audit the few SQL Server Logins, I have used filters while creating Server Audit by using CREATE SERVER AUDIT [audit123] TO FILE ( FILEPATH = N'D:\' ,MAXSIZE = 2048 MB ,...
11
votes
1answer
194 views

Can I tell when and who updated my database from v11 to v12 on Azure?

Earlier today I noticed that all my Azure SQL database servers where updated from v11 to v12. I am the only one in my company that should be touching those dials, but not the only person in my company ...
1
vote
1answer
799 views

Tracing failed login attempts in Oracle

I have some users who are logging in with a wrong password and their accounts get locked. Now I need to find the source of the failed login attempt. The machine, username etc. Is it possible to find ...
2
votes
2answers
399 views

Java Spring application Database triggers auditing - how to provide the right user that made the change

We are developing a new web application. one of the most basic requirement is to audit all entities changes into a separate table. We would like to use DB triggers for that purpose. We use MySQL as ...
0
votes
1answer
40 views

Storing revisions and relations between revised items in 1:N and N:N scenarios for audits

I have several of the following situations in a MySQL schema that I design for a custom CRM/ERP solution. 1:N related tables SO and SO_ITEMS (SO is just one example I have several) that both need to ...
0
votes
0answers
45 views

Oracle 11g Auditing and Collecting the SQL Text with AUDIT_TRAIL=OS

I'm certainly no Oracle DBA, so please forgive any ignorance on my part. I've done a fair bit of research, but I'm a bit stuck with something at the moment. Hopefully someone can help. I'm currently ...
0
votes
1answer
62 views

I want to find out how data is getting inserted to a particular table?

I want to find out how data is getting inserted to a particular table. I mean to say I want to find out the job or Stored Proc which is running on my SQL Server and pushing data regularly into one of ...
4
votes
2answers
108 views

Extended events vs SQL Audit - performance implications

I would like to setup an audit trail kind of system on my database to monitor for UPDATE/INSERT statements on a specific table with very high activity. I have two options in front of me: using the SQL ...
0
votes
1answer
58 views

PUBLIC privilege potential security threat - Oracle database

Recently, audit findings at my site found that PUBLIC being by default assigned to all the schemas that are created is a big risk since when a new user is created and even if we were to assign only ...
1
vote
1answer
29 views

Statement specific auditing - Oracle

I have enabled default auditing in one of my database. Oracle 11g. Audit_trail is set to DB, other than that for a particular schema 'test' I have set: audit all on test by access With the above ...
0
votes
1answer
46 views

Mixed mode auditing - 12c

Oracle 12c database comes with default Unified auditing enabled even if we set it to FALSE which has ORA_SECURECONFIG policy enabled by default. Apparently, the audit options for that particular ...
4
votes
1answer
38 views

Multiple Filters for Databases on SQL Server Server Level Audit

I am attempting to create a Server Level Audit to track Database Level events in SQL Server 2014. I know I can create them at the database level but I want the audits all databases at the server ...
16
votes
4answers
19k views

What is an audit table?

What are audit tables? How are they useful? I came across them reading this article.
2
votes
2answers
900 views

How to speed up audit trigger?

The task: write a trigger to log all updates within tbl1 table for future audit users' actions. The tbl1 table: id INT(11) y SMALLINT(6) country SMALLINT(6) -- really here ~20 fields but only some ...
0
votes
0answers
31 views

How to audit user that reinitialized replication in sql server

How can we track who reinitialized our replication. Is there a way to check this user or login? Thanks in advance
3
votes
1answer
92 views

SQL Server 2016 Audit Options

Often law or organization policies require an application to track changes to certain table rows in a database. The changed data is often also viewable through some application page. Some common ...
-1
votes
1answer
45 views

How to read the deleted value using a variable

I'm trying to get @OldValue = (select @fieldname from #del) to give me the value. Instead I get the column name for the result. Is there a way to write this so it can output the value. If I write ...
-1
votes
1answer
34 views

Update log table with all table updates [closed]

I need to update a log table with old and new updated values. Any ideas how can we do this in a trigger? I need to log all inserts and updates and write a custom message in the column like.. "User ...
0
votes
1answer
50 views

How to get the deleted value using while looping through the columns

I wrote a trigger to do auditing. To capture all the changes, I loop through the list of columns. The problem I'm having (see code below), when I try to set the OldValue using the @fieldname, I get ...
0
votes
1answer
37 views

Who deleted a record?

Is it possible to audit a Postgresql 9.4.5 database in such way that I could find when a specific record was deleted? I don't know what do I need to have enabled / available for such
0
votes
0answers
70 views

After update triggers that deal with multiple column updates

I want to create a table for audit (audit in the sense of recording whatever a user has done in terms of data manipulation – e.g. update first name, delete contact etc.). For that I need to write a ...
0
votes
1answer
33 views

How to find the AD user that logged in to SQL Server using SQL Login [duplicate]

Some users are logging into database servers locally, opening SSMS and logging in to SQL Server using SQL logins to run queries. How can I find the AD user that logged in to SQL Server using a SQL ...
3
votes
0answers
236 views

Exclude a User From an Audit [duplicate]

I need to set up a SQL Server Audit to capture all database activity for all logins except one - the login our application runs under. In this case the login I want to exclude is CPSDOM\cpointedb. In ...
2
votes
1answer
2k views

SQL Server Audit Specification - filter DML by all but one user

I'm setting up a database audit. I'd like to capture any DML change that is issued by database user other than the service account related to the application. In short, this is to prove to our ...
0
votes
1answer
52 views

Purging audit records - Oracle

At the end of each financial year, audit team asks for audit records for samples dates in a year as per their methodology and ideally we are supposed to provide them. (Say, give them list of schemas ...
0
votes
1answer
29 views

Record of schema related changes - Oracle

Is it possible to get the all changes that is made to schema as in what privileges was first assigned to the schema on creation, creation date, if later modified with different privilege what was that ...
1
vote
1answer
195 views

how to get History of queries executed with username in SQL

I can get executed queries by using: SELECT deqs.last_execution_time AS [Time] ,dest.TEXT AS [Query] FROM sys.dm_exec_query_stats AS deqs CROSS APPLY sys.dm_exec_sql_text(deqs.sql_handle) AS dest ...
2
votes
0answers
740 views

Where can I get error messages from SQL Server Auditing?

Where can I get information about the audit process failing to start? I'm setting up auditing on my MS SQL 2014 server. I've created an AUDIT and an associated AUDIT SPECIFICATION, but when I try ...
-1
votes
2answers
105 views

Oracle audit log to other server?

How can I configure audit log records to other server? Because: DB Server is full because it is very big. Our IT team manages DB server and our team (security team) is going to get audit log in our ...
3
votes
0answers
507 views

Auditing - parameter values not being written to log

I am using auditing to track usage of some procs in the database. In the log I can see a record for the Procedure being run and, immediately afterwards,the SQL statement that is being run. The ...
0
votes
2answers
56 views

Notify when database is accessed in any manner

I'm using SQL Server 2012. Is there a way to receive a notification (email/log etc..) if a database or table in a database is touched in anyway (e.g. CRUD via Stored Procs or tables opened via ...
-1
votes
1answer
48 views

SQL command or trigger needed to capture changes in tables [duplicate]

I want a query or trigger that will identify what changes done in the database tables from the Third Party Software such CMS etc. I want to check that which data is modifying with time. There is no ...
3
votes
1answer
396 views

Is Service Broker the best choice for auditing data changes on SQL Server Express?

My project is to audit 5 to 10 existing tables in our system without prolonging transactions. Whatever method is used, it has to work on SQL Server Express 2005 to (eventually) 2016. I've done ...
0
votes
1answer
39 views

Unable to find Audit specification when I try to create Server level audit

I am trying to use 'SERVER_PRINCIPAL_CHANGE_GROUP' audit action on a SQL Server to capture the sp_addlogin events. But when I try to create a Server level audit using GUI, I am not seeing the Audit ...
0
votes
0answers
13 views

Keeping track of operations performed by database users [duplicate]

I have three users for my database with several privileges. I want to keep a record of every user's actions. How can I track which operations have been performed by which users?
0
votes
0answers
25 views

SQL Server Audit could not write to the security log during busy periods

We have SQL Audit enabled with 13 audit actions; during busier periods (4k to 5k batches/sec) we get several occurrences of the following error: SQL Server Audit could not write to the security ...
2
votes
1answer
57 views

I want to find out in SQL SERVER 2012, who is creating SQL Logins and on which date

I was trying to find out in sql server 2012, who created login and which date. Can any body help on this thanks,
1
vote
0answers
43 views

How unique does AUDIT_GUID need to be when creating a server audit?

When you use the GUI to create a server audit it creates a password worthy (no caps) value like e5abe6c5-f451-41f3-936c-b1da1c0786ce When you look to CREATE SERVER AUDIT with Transact-SQL it ...
1
vote
1answer
39 views

Oracle 12 - Reporting on Roles

Is there a way to report on all the custom roles and/or responsibilities created within Oracle, Outside of SQL? I am looking for a dashboard that shows how many have x role, y role that could be ...
1
vote
1answer
40 views

SQL Server Audit not tracking changes at the database level

I'm currently trying to create a test implementation of SQL Server Audit in SQL Server Management Studio to see how it works. I created an test audit at the server level, and another one at the ...
1
vote
0answers
153 views

Auditing AS 400 DB2 library user access

As part of the testing to check for authorized users having access to applications and libraries on AS 400 systems, I need help to figure out a list of users having access to applications hosted on ...
0
votes
0answers
41 views

Limit number of entries written by Logon-Trigger

We are auditing connections to our SQL server by using a logon trigger. (SQL Server 2008 Standard Edition.) However what we are seeing is that there are always a number of entries logged for each ...
3
votes
3answers
581 views

Can SQL Server Audit be used to track hostnames or IP adresses of the users performing DML on a table?

I have been reading about SQL Server Audit, and so far I have assimilated that it tracks the command that has been executed, and some other additional information(SPID, object ID and stuff). But can ...
9
votes
3answers
1k views

Find the identity of the client firing a query in SQL Server without using triggers?

I'm currently using Change Data Capture (CDC) to track data changes, and I wish to track the host name and IP address of the client submitting the query that made the changes. If there are 5 different ...
1
vote
1answer
69 views

Database agnostic auditing [duplicate]

Background Various databases have custom implementations for auditing: SQL Server Audit Oracle Audit PostgreSQL Audit Trigger MySQL Enterprise Audit Problem A number of problems exist: There ...
0
votes
0answers
34 views

Because of a wrong entry with wrong date, how can we rollback a database synchronized over multiple systems?

On a mobile device, a set of operations has been saved in the local DB with a wrong date (because the system date was set in the future). Then the device regularly doing synchronisation with a server ...
1
vote
1answer
66 views

How to distinguish the current operation is done from system or from sql server management studio

We want to record who insert or update a table, so we add "CreatedBy" and "ModifiedBy" columns. When the data is changed through the application, we can easily get the person. But when someone uses ...