0

I need to audit all activity coming from a specific ip adress. Whats the best method to do this in an Oracle Database 19c?

2

With Unified Auditing.

Oracle Database Auditing

Oracle Database Unified Auditing enables selective and effective auditing inside the Oracle database using policies and conditions. The new policy based syntax simplifies management of auditing within the database and provides the ability to accelerate auditing based on conditions. For example, audit policies can be configured to audit based on specific IP addresses, programs, time periods, or connection types such as proxy authentication.

Example:

CREATE AUDIT POLICY mypolicy
ACTIONS ...
WHEN 'SYS_CONTEXT(''USERENV'', ''IP_ADDRESS'') = ''1.2.3.4'''
EVALUATE PER SESSION;

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.