Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
0 votes
0 answers
18 views

How to import Oracle unified audit spillover files generated by Data Guard physical standby database without switching over?

I know that I can use the DBMS_AUDIT_MGMT.LOAD_UNIFIED_AUDIT_FILES procedure to load the unified audit spillover files (*.bin) into the internal unified audit tables in an Oracle 19c database. But, ...
cdub's user avatar
  • 101
0 votes
0 answers
24 views

Audit attempts to access the Database, only failed for some users and all attempts for the rest

I am needing help to be able to configure an audit mechanism that allows me to record in the audit_trail the login (or create session) attempts in my databases, the problem comes when I need to record ...
miguel ramires's user avatar
0 votes
1 answer
34 views

I can not read sqlaudit file generated in SQL 2019 from SQL2016

I am trying to read xxx.sql audit file(which has been generated by sql 2019) form sql server 2016 version and I am getting below error: Msg 33201, Level 17, State 1, Line 31 An error occurred in ...
Prudhvi Govind's user avatar
0 votes
1 answer
28 views

Point-in-Time-Recovery of Postgres at an arbitrary time for audit purposes

TL;DR Would you recommend using CDC or pg_wal-based recovery to reproduce the state of the database in an arbitrary time, or stick with joining SCD2 tables (with start end end date for every record) ...
Mr Arkadin's user avatar
0 votes
0 answers
18 views

Creating a server audit specification through SSMS: what is the correlation between Audit Action Type and other columns?

Having gone through https://learn.microsoft.com/en-us/sql/relational-databases/security/auditing/create-a-server-audit-and-server-audit-specification?view=sql-server-ver15 where it explains how to ...
Betty Liv's user avatar
0 votes
0 answers
12 views

can't create database audit always on contained 2022

I've created a server audit with the same guid on each node. Then when I connect to the listener and I want to create an database audit with ssms it does not see the server audit. If I create it on ...
Tisax190's user avatar
0 votes
0 answers
68 views

SQL Server Database Audit used with a trigger to monitor CREATE TABLE events

Got SQL Audit enabled on a database with SQL Server 2016 SP1. Trying to catch a CREATE TABLE event with a trigger, and add that table to the audit to log data operations. Problem is that changes to ...
Razvan Zoitanu's user avatar
0 votes
1 answer
94 views

Auditing for direct Object Access (Skipping indirect access)

to isolate internal tables from third party database access, we've created schemas specifically for that use case. Third party Logins/DB Users only have access to those "public" Schemas. The ...
Arokh's user avatar
  • 105
0 votes
1 answer
59 views

How do you correlate SQL Database Audit spec's log column transaction_id with a LSN? from trans log or CDC capture table?

How do you correlate SQL Database Audit log column "transaction_id" with a LSN either from the trans log or a CDC capture table? I am trying to do this because cdc only captures the data ...
Joe Papp's user avatar
0 votes
0 answers
42 views

sqlserver alwayson audit setting

I am running SQLSERVER ALWAYS ON 2019 ENT VERSION. I'm trying to STOCK an audit at the database level in SQLSERVER. In the master, it was confirmed that the log audit was left at DATABASE LEVEL. ...
user avatar
0 votes
2 answers
366 views

Why password return null for table master.. sys.logins? *SQL Server

I have made comparison between two sql servers on my environments A - SQL SERVER 2016 - Passowrd return value B - SQL SERVER 2019 - Password is null Is there any setting to check. Thank you in ...
zul nasir's user avatar
0 votes
1 answer
38 views

Automatic ID and Created/Modified By/Datetime fields?

Is it possible to get MySQL to automagically create and manage a record ID, Created By/Datetime and Modified By/Datetime columns for all tables in a database? Note: Not looking to manually create ...
Benja's user avatar
  • 1
-1 votes
1 answer
68 views

Denying access to some databases

I need to deny a user access to certain databases in the SQL Server 2019 instance. The user should however be able to migrate all the other databases in the instance to another instance. What is the ...
PTL_SQL's user avatar
  • 341
2 votes
0 answers
69 views

Can I audit all actions of a database role?

I know from AskTom that we can audit all actions of a particular user account, e.g.: create audit policy test_audit_policy actions all when q'!sys_context('userenv', 'session_user') = '...
Thorsten Kettner's user avatar
0 votes
1 answer
51 views

Correlating SQL Audit transaction_id to LSN

I have a relatively simple question that is "Google resistant". I have a SQL Database Audit spec that logs a transaction_id. I also have a Change Data Capture (CDC) spec that logs __$seqval (...
Vocoder's user avatar
  • 117
3 votes
1 answer
116 views

In SQL Server auditing, what is frame nest level?

In SQL Server, when function sys.fn_get_audit_file() returns info from audit files, it includes column additional_information. Per that column's documentation, it contains "one level of TSQL ...
Aboat's user avatar
  • 43
0 votes
2 answers
519 views

SQL Server Audit log format changed in 2022?

I have an audit setup on various versions of SQL Server to dump their log files to a network share. The server that reads the files (using sys.fn_get_audit_file) to gather the data from them is 2019. ...
lightwing's user avatar
0 votes
0 answers
103 views

SQLLocalDB audit to application/security log

Has anyone encountered an error that Sql Server LocalDb cannot start an audit aimed at the application log (or security log)? it seems like problem only for the localdb instance. sys....
solovyevuv's user avatar
0 votes
1 answer
155 views

class_type column of system function "sys.fn_get_audit_file" returns null

I implemented audit in SQL Server 2019. Also I have created a job to save audit records from file to a table. According the microsoft document column class_type is NOT NULL. so in my table is NOT NULL ...
Meyssam Toluie's user avatar
0 votes
0 answers
21 views

bypassing application controls from database

I'm currently doing an audit on oracle payables & CC&B and I noticed that the DBA team has full access on the database and with no audit trail enabled. Is it possible to bypass the application ...
Ibrahim aj's user avatar
0 votes
0 answers
33 views

Finde the difference in UPDATE in PostgreSQL

I would like to determine the difference in an UPDATE that was carried out on a table DE_projects. So between old and new values. The aim is to monitor changes in the permissions column in the ...
MTwain's user avatar
  • 1
0 votes
1 answer
289 views

SQL Server 2012 how to audit user's access to database tables and views?

We have a read-only login account that unfortunately was created without proper planning, and now users throughout the company are using this login to access tables and views in our database. The ...
Fandango68's user avatar
0 votes
1 answer
75 views

Keeping track of client logged-in OS user when connecting to a database server

We are implementing a monitoring solution that keeps track of logins to SQL Server. We need to capture the following event: a user logs in to a Windows client and from there logins to a remote SQL ...
Andrea's user avatar
  • 210
0 votes
0 answers
70 views

Is there a way to disable mysql enterprise audit for a particular mysqldump/restore session

I am using mysql enterprise audit in our production, which is working perfectly fine. I have filter rule applied such that all table access queries are logged. However while dumping or restoring a ...
Nishant Neupane's user avatar
0 votes
0 answers
32 views

Postgres Audit Logging

I have activated Postgres audit logging (edb audit) and can see its creating 2 file e.g. audit-2023-06-03_000000.csv audit-2023-06-03_000001.csv 1st file having only one entry with "...
Cassandra Thrift's user avatar
0 votes
0 answers
67 views

Can a user connected as sysdba always bypass auditing mechanisms?

Can a user connected as sysdba always bypass auditing mechanisms? What could be done to minimize (or prevent) auditing prevention?
Mehdi Charife's user avatar
0 votes
3 answers
978 views

Audit trigger to only track when specific columns change, and only log the old and new values for the changed columns

I have a table with 75 columns and need to track about 15 of those columns to log out the old and new values anytime the data in any of those 15 columns change (updates only, no inserts or deletes). ...
Lando_'s user avatar
  • 3
0 votes
1 answer
378 views

How can I audit actions done by my schema within my schema using Oracle Unified Auditing?

I want to be able to audit specific actions within my own schema (such as DDL, inserts, updates, anything I feel like). I am on Oracle 19C with mixed mode for auditing. I have a user "SPLUNK"...
nightmare637's user avatar
4 votes
1 answer
178 views

Official Source of What Time Zone an XEvent is Logged

I'm trying to prove that extended events (hence audits as well) are logged in UTC time zone and can't be changed but I can't find an official source. I've searched Microsoft's pages and SQL Server ...
halid.sert's user avatar
1 vote
0 answers
436 views

SqlServer User and IP address auditing using Triggers + SESSION_CONTEXT – is this thread safe?

Problem We use a combination of triggers and values set in SESSION_CONTEXT to implement dta change auditing on our SqlServer database. Unfortunately, we have started to notice that the username and Ip ...
user1504505's user avatar
0 votes
0 answers
94 views

SQL Server audit per day

I need, for regulation reasons, to create a SQL Server audit files to monitor database actions. I want to somehow create a file per day so I can ship the file to Azure storage. I know the audit files ...
EranH's user avatar
  • 1
0 votes
0 answers
2k views

Unified Audit record write to audit trail table failed with Unified audit disabled!

on a production database I keep on observing the following error: 2022-08-15T16:58:36.196692+02:00 Unified Audit record write to audit trail table failed due to ORA-4031. Writing the record to OS ...
trustno1's user avatar
0 votes
1 answer
2k views

Is it possible to set Audit_trail parameter to both DB and OS in Oracle database

In Oracle database ,we can direct audit records to either db , os or in xml file by using the below command: ALTER SYSTEM SET AUDIT_TRAIL= DB SCOPE=SPFILE; But is it possible to direct audit records ...
Allan's user avatar
  • 1
0 votes
0 answers
123 views

How to find statement causing "The user does not have permission to perform this action." in Azure SQL Database?

I ran a Kusto query: AzureDiagnostics | where TimeGenerated > ago(1d) | where Category == "Errors" and error_number_d == 297 | summarize count(), min(TimeGenerated), max(TimeGenerated) ...
Mark Freeman's user avatar
  • 2,181
0 votes
0 answers
381 views

MySQL 5.7 (5.7.38): install audit plugin

To get a audit trail of users/hosts they're connecting to a MySQL server, I would like to install an audit plugin. I read a lot about the MariaDB server_audit plugin. However, when I try to install ...
Tim's user avatar
  • 1
0 votes
0 answers
164 views

How to filter out some database roles from sql server login audit?

I have in place a Server audit that collects logins. Every 5 minutes I import that data into a table in another instace where I build and send by email a small report. That's fine but i need to set up ...
MBuschi's user avatar
  • 4,535
0 votes
1 answer
27 views

Built in audit tracking database

I remember reading a blog post last year about a database with built in audit tracking, being able to get a version of any table at a point in time without any custom work needing to be done. Maybe it ...
user433342's user avatar
1 vote
1 answer
257 views

Create Audit Trail from SQL CDC

I have a few tables on which I have enabled CDC. As each row in CDC table contains all the columns regardless if they were changed or not, so it becomes difficult to figure out only the changed data. ...
user17146433's user avatar
1 vote
1 answer
139 views

Can one log manual data changes to an Azure SQL table using Set-AzSqlDatabaseAudit?

This is a follow-on question to Logging just one table in an Azure SQL Database It is possible to connect to my Azure SQL Server database using SSMS (Microsoft SQL Server Management Studio), and an ...
gordon613's user avatar
  • 205
1 vote
1 answer
591 views

Logging just one table in an Azure SQL Database

Our company is ISO27001 certified. As such, it is required for us to log database events. We are taking an incremental approach, and first starting with logging events just on one table. This ...
gordon613's user avatar
  • 205
0 votes
1 answer
860 views

What could be the reason for this invalid objects after trying to upgrade?

We recently wanted to upgrade our Database but didnt get to do it as we got a lot of Audit specific invalid objects, after looking online for ressources we couldnt find anything specific reason for ...
Beniben's user avatar
3 votes
0 answers
81 views

Double registration when using select into

SQL Server 2019 CU15, Database Audit: When auditing a SELECT on a database, everything looks fine, but if I SELECT INTO a #myTempDB, I get double registration in the AUDIT LOG. I created a test ...
Torben iisager's user avatar
1 vote
2 answers
2k views

Reading SQL Server .sqlaudit Files Stored in S3

I set up an audit in SQL Server that saves audit logs (.sqlaudit files) to RDS, which we then copy over to S3 using a standard process. All of the documentation I can find on reading these audit files ...
quarry-marbles's user avatar
0 votes
0 answers
332 views

How do i disable Oracle Unified Auditing for RMAN?

I currently have Oracle's Unified Auditing enabled, but I noticed that RMAN is also listed in the Unified_Audit_Trail. The value RMAN_AUDIT is displayed in the Audit_Type instead of Standard when i ...
Beniben's user avatar
0 votes
2 answers
858 views

Auditing via change data capture (CDC) for MSSQL

I want to ask the DBA community about best practices for auditing the MSSQL database. I set up CDC MSSQL and experience some difficulties with it. It's working all fine until I change the structure of ...
Valentinas's user avatar
0 votes
1 answer
511 views

Getting database-level audit logs without database audit specification

I have server level auditing on SQL Server 2014. Why am I receiving database-level audit events (such as SELECT, INSERT, UPDATE, DELETE, etc.), even though there are no database audit specifications? ...
Tom's user avatar
  • 13
4 votes
4 answers
13k views

How to get historical queries in SQL Server, based on time

Please how do I get the query that was running at a specific time in SQL Server 2016? Something similar to AWR report in Oracle? We need to know what was happening at a specific time in the past ...
PTL_SQL's user avatar
  • 341
0 votes
0 answers
170 views

db2 How to get the application user from delete events

We use temporal tables to store the history of all changes to specific tables in the db. But we also need the user who made the changes. While on db2 side the user is the application, the application ...
Kahn's user avatar
  • 1,813
0 votes
1 answer
411 views

Use trigger on DELETE to retrieve original SQL command and user who did it

I'm trying to create an audit log to store all delete commands on some tables, on MSSQL 2012. What I need is the username that executed it and the command executed, then I can insert them on a log ...
Hikari's user avatar
  • 1,553
1 vote
0 answers
75 views

Where does PMM store login details for DBs?

I have to audit the logins used by our services and it's not clear where I find the logins used for our PMM instance to connect to the remote DBs.
Cultivape's user avatar

1
2 3 4 5
9