Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

0
votes
1answer
17 views

Some queries not logging using RDS's SQL Server with C2 Auditing enabled

Similar to a past issue I had with audited queries not showing when using Extended Events, I'm having an issue with queries not logging when using C2 Auditing on an RDS SQL Server instance. (I would ...
-3
votes
0answers
44 views

how to get the audit information in sql server [closed]

I have a software that connect to sql server in network and I need a tools or method for audit every happen in sql server 2014 or higher and show me when I need them(and save it). I want info every ...
1
vote
1answer
14 views

Percona Audit Log plugin not auditing account

I have setup the Percona-server-5.6.41-89 Audit plugin with the following settings: audit_log_policy=QUERIES audit_log_handler=FILE audit_log_file=/var/log/mysql/perc_audit.txt audit_log_format=CSV ...
0
votes
1answer
15 views

Sybase ASE Auditing on sp_addlogin sp_droplogin sp_modifylogin

We have requirement to enable auditing on Sybase ASE(Adaptive Server Enterprise/15.7/EBF 27351 SMP SP139 /P/ia64/HP-UX B.11.31/ase157sp138x/4041/64-bit/FBO/Tue Aug 8 07:33:11 2017) and I enabled the ...
1
vote
3answers
40 views

Login report of Sysadmin

We have got a requirement to provide login report from SQL Server for Sysadmin only - This would have log-in date and time when anyone logged into SQL server having sysadmin privilege. Is there ...
0
votes
1answer
11 views

SQL Audit Log In Repeats Results

I'm using SSMS's Audit feature to see who's successfully logging in and logging out of the server and I'm currently testing it in a server in which only I have access to it. I used for ...
0
votes
1answer
42 views

SQL server Audit- Does it cause overhead

If I enable Audit on production databases that have over 100 m rows and have constant DML statements going (24 hours), is that going to cause any overhead on SQL server performance or tempdb? Does ...
0
votes
1answer
13 views

Audit MariaDB Which User Account Privileges Are Being Used

I'm looking to improve the security of my MariaDB installation by better auditing the user accounts and the privileges of each user account. This database is being provided as a service out to many ...
2
votes
1answer
59 views

All data got deleted or truncated- What happened?

What are some of the ways of knowing how the 100 M rows of record table got wiped out. Database is in Full recovery mode. I am not sure how doing daily backups are happening but before the truncate or ...
0
votes
1answer
105 views

How to log ALL queries made by users in SQL Server 2017 Standard? [duplicate]

Is there a possibility to do this? All queries and actions performed in any database need to be logged, because of in house compliance. I need information (and/or source) if we need MS SQL 2017 ...
0
votes
1answer
35 views

SQL Server 2008 R2 Auditing

I am new to database administration, and I need to implement auditing of all users of multiple databases. Can we audit multiple users of a multiple database by creating just one audit specification? ...
0
votes
1answer
27 views

MySQL 8.0 Triggers Current_User not working

I have this trigger that inserts a row to a table CREATE DEFINER=`root`@`localhost` TRIGGER `user_log_AFTER_INSERT` AFTER INSERT ON `user_log` FOR EACH ROW BEGIN INSERT INTO ...
2
votes
4answers
141 views

Auditing data changes in SQL Server

I am tasked with implementing auditing of data changes on our database. I am aware that there are commercial products for this, but I wanted to know which design would be better. For any given row ...
0
votes
1answer
41 views

How do I access a user's application username when that application connects to the DB?

I'd like to audit changes to a table in SQLServer using a trigger and an audit table to do so. End-users connect to the database through an application. If I use SYSTEM_USER to obtain the end user's ...
0
votes
2answers
35 views

Creating an auditing strategy when a user has been defined in a table instead of in SQL

To preface this post, I'm pretty new to database design, so please excuse me if there's already a simple or immediate answer to this post. In my DB I have a table called t_employees which acts as a "...
0
votes
1answer
127 views

How to trace a query on Firebird?

With SQL Server we can trace for a period of time, to get what queries are running. How can I do this with Firebird? I'm reading something on their website but there's only user trace like if the ...
1
vote
0answers
58 views

SQL Server Agent Alert does not pick up some of Events from Application Log written by SQL Server Audit

My end goal is to be emailed when new object (schema, table, procedure etc.) is created / altered / dropped at one of my databases on SQL Server I created a server-level audit, that writes to Windows ...
0
votes
3answers
200 views

How to Audit Successful Logins for certain logins only?

I need to setup auditing (logging) of successful logins on SQL Server (date, time, who), not for all logins on a server, but only for a small group of logins (developers) In short, me only ...
0
votes
2answers
74 views

Users who are connected into the database

I need some help on how to find all the users that are connected to one of my database. I should check this on weekends to find out all the users that connected during the week. Thank you.
0
votes
0answers
66 views

Good practices for audit data changes for SQL Server 2016

In my current project we are required to keep the records of data changes for the Employee table at least for specific field for NOW (it can be extended for all the fields later). We are also ...
0
votes
1answer
61 views

ORACLE 11g Know Insert Record Details which Failed to insert

I have started auditing insert records by user on failure to any table in my oracle 11g Database. I have used following command to do the same. AUDIT INSERT ANY TABLE BY SHENA BY ACCESS WHENEVER NOT ...
1
vote
0answers
17 views

Any way to pass additional parameters to Azure SQL Audit?

We are exploring Azure SQL Auditing capabilities. It gives us a list of all the queries executed and some additional data which is good. However, field server_principal_name is always reflecting a ...
1
vote
2answers
105 views

Queries not logging when using Extended Events in MS-SQL Server to track queries

I'm using MS-SQL Server 2012 Standard, running on Windows Server 2012 RTM. I used SSMS to create a Extended Event Session, where I used the built-in "Batch Query Tracking" template and save the result ...
0
votes
0answers
35 views

Generate security audits permission SECPOL - SQLSvcAccount keeps getting revoked\removed

I've followed all 3 instructions, as per: https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/write-sql-server-audit-events-to-the-security-log?view=sql-server-2017#...
2
votes
1answer
74 views

ORA-07445 when enabling Unified Auditing with Oracle Database 12.2

When enabling the below Unified Auditing policies in Oracle database 12.2, a generic error ORA-07445 in the v$alert_log and ORA-03114 for each new log-on occur: ORA-07445: exception encountered: ...
1
vote
2answers
344 views

Oracle Database Security - Audit Trail for specific user and specific module application

I want to enable audit trail for specific user, but only for sessions when this user connect to database using one specific module applications. For ex. I want to enable audit trail for user test1 ...
0
votes
0answers
31 views

Is there a way to generate a report on table/column/object usage by database user? [MSSQL]

We have a large database accessed by multiple different applications, each running under their own SQL Login, all with permission to access all objects in the database. I would (ideally) like to ...
0
votes
2answers
109 views

LOG all SQL Server queries with their durations

Is there a way to log all Microsoft SQL Server queries executed on a certain server, with their respective durations? I'd like to be able to analyze all queries will a tool like what PGBADGER does ...
0
votes
0answers
197 views

AWS RDS MySQL audit.log rotate

I have a problem with removing old audit.logs. Some time ago in my Option group I added a setting to store 20 logs 100MB each. I see that 20 files named audit server_audit.log.xx were created, each ...
0
votes
1answer
233 views

Polling SQL Databases [closed]

Is there any way to poll for MySQL database changes using JDBC? I need exactly which changes happened (not a simple yes/no). I tried using a thread which executes every 15 seconds to check whether my ...
0
votes
1answer
28 views

Track MySQL Procedure Changes in MySQL

We want to keep track of changes being done to MySQL procedures only, actually recently our procedures seem to have overwritten to some previous versions and we were unable to track it that who did ...
0
votes
1answer
917 views

missing FROM-clause entry for table in trigger function in postgresql

I have created an audit trigger for table "product" that should insert data into "log_product". CREATE FUNCTION public.insert_log_product() RETURNS trigger LANGUAGE 'plpgsql' COST 100 VOLATILE NOT ...
1
vote
1answer
534 views

How to grant permission to view database audit logs to non-sysadmin login

I have a non-sysadmin user which must be provided with an ability to view "server audit logs" Tried to grant below permissions to this login / user: grant ALTER ANY server AUDIT to [login] grant ...
2
votes
1answer
25 views

How to Audit any change in Permission?

Is there any way how to know "Who did change the permission on users" Like: who give read permission or owner on a database for a user? Using SQL Server 2014
2
votes
1answer
299 views

MariaDB audit plugin logs all queries instead of DML only

I was testing the "server_audit" plugin of MariaDB, which I configured like this: plugin-load-add = server_audit server_audit_logging = ON server_audit_events = QUERY_DML server_audit_output_type = ...
0
votes
2answers
39 views

audit /track changes [closed]

I want to track changes on SQL Server 2012, and save it for 5 days. I want get the time that each insert/update/delete operation occurred on the SQL Server and save the new insert line(on insert ...
0
votes
0answers
516 views

Find Who Disabled Logins in SQL Server

Someone disabled lot of SQL Server logins on one of our SQL Server 2014 boxes yesterday, causing a major outage for some of our applications. I need to find out who disabled those logins. Is there a ...
1
vote
2answers
122 views

Is there an equivalent to Azure SQL Threat Detection for on-premise database servers?

Due to GDPR, we are seeking software to help identify malicious activity or data breaches from our production SQL Server. It seems if we were using Azure, this is a flick of a switch. What is ...
2
votes
1answer
76 views

SQL Auditing Functionality

Can someone tell me what the cause of this alert is that's captured by our SQL Audit trace we have setup using the built-in auditing functionality? This alert is generated from time to time in the ...
0
votes
1answer
58 views

Get more information from Oracle audit trail

I just turned on auditing for an Oracle 11g database. I'm interested in getting more information about each event; for example, when I see a CREATE_INDEX event, I'd like to know which field was ...
1
vote
0answers
237 views

SQL Audit and Truncating the Audit File

I'd like to set up SQL Audit on our SQL 2014 database and then setup a process where we read the contents of the audit file, on a periodic basis, using fn_get_audit_file() but then immediately ...
2
votes
1answer
66 views

Logon events detail in oracle

I want to fetch the oracle user login detail for the month February. I tried the below query. select distinct os_username,username,userhost,terminal,timestamp,action_name,logoff_time from ...
12
votes
1answer
520 views

How to filter out Scalar Valued User-Defined Function usage from SQL Server Audit Data?

We have a SQL Server database which has a database audit specification which audits all execute actions on the database. CREATE DATABASE AUDIT SPECIFICATION [dbAudit] FOR SERVER AUDIT [servAudit] ADD ...
4
votes
3answers
117 views

Capturing the Login Failure alerts specifc to bad password attempts

I am unable to figure out the way to capture only those failed logins, which have failed with the error: Login failed for user X. The password did not match... Yes I can read that info out from ...
0
votes
1answer
67 views

Golden Gate activity auditing with SQL?

In a scenario where Oracle Golden Gate is used to replicate a primary site with an Oracle RAC database to a secondary site (and active/active back) we suspect unexpected changes from the unused ...
1
vote
1answer
458 views

Audit Database Log On/Off

SQL Server 2012 introduced a few new audit action groups. Two that I'm interested in using are to audit log-ons/offs at the database level: SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP ...
0
votes
1answer
54 views

Oracle - Auditing for only some top-level statements

I know that we can turn on auditing for all top-level statements using the following audit all statements I would like to continue logging only top-levels statements, but not all of them. For example,...
0
votes
1answer
251 views

Oracle Unified Auditing Update Table

I am trying to audit when a user UPDATEs a table in Oracle. The script I am running is below. All of the other auditing works fine, but not the UPDATE policies. I created two policies to try two ...
2
votes
1answer
150 views

Know what tables each user is accessing

I have a database with a lot of users, all of them with full read privileges on all the tables but not all the users are reading all the tables. I want to have each user having as little privileges as ...
3
votes
2answers
859 views

View SQL Server 2016 Login Audits

I have Login Audits for both failed and successful. How do i view the actual logs? Where are they located? https://docs.microsoft.com/en-us/sql/ssms/configure-login-auditing-sql-server-management-...