Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

0
votes
1answer
15 views

Using views with no insert table VS Audit tables

I(not a DBA) am considering designing Audit tables for an application that needs to be really fast as well fully audited (undo is not necessary). I referred to some from so and I found variations of ...
1
vote
0answers
18 views

How to measure durations (import, update) in Postgres DB?

we have a Postgres database which receives data by an extern web client. We would like to measure the duration of the UPDATE, INSERT and DELETE processes on our tables. Until now, we used the ...
0
votes
1answer
46 views

Who created that table in SQL Server?

I was wondering if there was a way to see who created a table in SQL Server 2017.
1
vote
1answer
26 views

Server Principal SID showing as NULL and name as empty string

In my SQL Server 2016 server,i set up a user logins Audit for Login successful and Login Failed action. Here is the script. USE [master] GO CREATE SERVER AUDIT SPECIFICATION [...
0
votes
0answers
12 views

Where is my audit as Oracle sys audit is enable

On an Oracle 11gr1 database, SYS audit is enabled: SQL> show parameter audit NAME TYPE VALUE ------------------------------------ ------...
3
votes
1answer
40 views

Tracking grant violations

We are changing one of our application user logins from being dbowner to a more granular permission scheme--finally. Is there a way from within SQL Server 2016 that I can track permission violations? ...
2
votes
1answer
52 views

Track all modifications to a PostgreSQL table

We have a table which has only roughly 500 rows, but it is very important for us. I want see all changes which happen to this table. The changes should get tracked with a timestamp. I don't want the ...
0
votes
2answers
47 views

SQL Server: Who created an audit and who altered it last?

I am trying to find out who created an audit (found under Audits) but I don't seem to have any luck. I've already tried many queries such as these: Blog 1, Blog 2, Blog 3 And SELECT * FROM [sys]....
0
votes
0answers
14 views

What SQL-Queries are created with ExaPlus to produce the menu in the left side?

I am considering what information should be provided under Article 15 (3) GDPR regarding the use of Exasol and ExaPlus.I don’t have SELECT ANY DICTIONARY system privilege to figure out this question ...
2
votes
0answers
41 views

Questions and advice for complying with Federal tax information (FTI) Security Guidelines for Federal, State and Local Agencies per Publication 1075

I've been able to find writings on compliance topics (e.g. HIPAA, SARBANES-OXLEY, PCI DSS) but I haven't found much on FTI (Federal tax information) and Publication 1075 outside of the IRS website ...
0
votes
1answer
35 views

How to check Auditing in Azure MSSQL MI?

I know that auditing is currently enabled in my azure MSSQL server, but how can I access these log files? Could it be done through SSMS? I need to know details about user activity in my databaase.
0
votes
1answer
43 views

how to get complementary information from sp_readerrorlog

when auditing what are the failing logins in one of my server, using the sp_readerrorlog procedure I get the following result, when running the following query: EXEC sp_readerrorlog 0, 1, 'Login ...
0
votes
0answers
11 views

Uninstall pgaudit?

I have installed pgaudit for my RDS instance in AWS following the instructions here. Now Im not satisfied and move the audit to the application layer and want to uninstall pgaudit. How can I do this? ...
1
vote
0answers
17 views

MS SQL 2008 R2, security and auditing

I have an 2008R2 SQL Server. There are a few AD groups added to the logins. Each group must have some permissions (and only these permissions if possible). Can someone help me with a few questions: ...
0
votes
0answers
25 views

audit policy on a table does not log expected results

Running on Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 - 64bit Production. Attempting to test auditing with the following steps: Created a new user, MYUSER. CREATE TABLE mytest ( id ...
0
votes
1answer
199 views

What's the difference between aud$ and dba_audit_trail tables in Oracle database?

I'm studying about audit in Oracle database and when I configure the audit using audit_trail = db the Oracle stores in the two tables
0
votes
0answers
61 views

Is it possible to audit query results in SQL Server?

I want to find out if it is possible to audit the results of any query that gets executed on an instance of SQL Server. We currently have C2 auditing enabled, but this only showed what query was ...
4
votes
1answer
49 views

Hiding or masking sensitive information in the SQL Server audit log

I'm looking into auditing of who are accessing the data in all tables in a database. We do have the additional requirement that we in the log can't have any information that can be used to identify a ...
0
votes
1answer
34 views

Trigger to log Users Assigned to website

Is it possible to create a trigger so that works with the following scenarios: User types valid login info to the web application A trigger is activated and login name is inserted to the audit ...
0
votes
2answers
238 views

Audit Trail in NoSQL vs. Relational DB, audit trail feature in MongoDB [closed]

Two questions regarding selection a DB type and engine for the scenario when the Audit Trail functionality is a must: Is there any preference in DB type (NoSQL/Relational) choice when the Audit Trail ...
0
votes
1answer
28 views

Question on Auditing 12C

I have the following configuration information: audit_sys_operations TRUE audit_file_dest ...
2
votes
0answers
25 views

Any way to reduce the logging level of SQL Audit?

I set up SQL Audit according to STIG compliance using exactly the recommendations given by the compliance documents. The problem is that after doing so my server is generating roughly 5GB of Audit ...
1
vote
1answer
41 views

Audit Plug-in for MYSQL 5.7.24 error

I have tried installing MariaDB audit plugin for MySQL 5.7.24. I have downloaded the 'server_audit.so' from MariaDB-10.3.11 and I think it is compatible with MySQL 5.7.24. But I have encountered this ...
1
vote
1answer
21 views

Oracle Audit on Types

I found that auditing can be done on oracle schema objects like procedures and views. Is there any possibility to do the auditing on Types?
0
votes
1answer
68 views

Some queries not logging using RDS's SQL Server with C2 Auditing enabled

Similar to a past issue I had with audited queries not showing when using Extended Events, I'm having an issue with queries not logging when using C2 Auditing on an RDS SQL Server instance. (I would ...
1
vote
1answer
43 views

Percona Audit Log plugin not auditing account

I have setup the Percona-server-5.6.41-89 Audit plugin with the following settings: audit_log_policy=QUERIES audit_log_handler=FILE audit_log_file=/var/log/mysql/perc_audit.txt audit_log_format=CSV ...
0
votes
1answer
64 views

Sybase ASE Auditing on sp_addlogin sp_droplogin sp_modifylogin

We have requirement to enable auditing on Sybase ASE(Adaptive Server Enterprise/15.7/EBF 27351 SMP SP139 /P/ia64/HP-UX B.11.31/ase157sp138x/4041/64-bit/FBO/Tue Aug 8 07:33:11 2017) and I enabled the ...
1
vote
3answers
67 views

Login report of Sysadmin

We have got a requirement to provide login report from SQL Server for Sysadmin only - This would have log-in date and time when anyone logged into SQL server having sysadmin privilege. Is there ...
0
votes
1answer
16 views

SQL Audit Log In Repeats Results

I'm using SSMS's Audit feature to see who's successfully logging in and logging out of the server and I'm currently testing it in a server in which only I have access to it. I used for ...
0
votes
1answer
100 views

SQL server Audit- Does it cause overhead

If I enable Audit on production databases that have over 100 m rows and have constant DML statements going (24 hours), is that going to cause any overhead on SQL server performance or tempdb? Does ...
0
votes
1answer
22 views

Audit MariaDB Which User Account Privileges Are Being Used

I'm looking to improve the security of my MariaDB installation by better auditing the user accounts and the privileges of each user account. This database is being provided as a service out to many ...
2
votes
1answer
66 views

All data got deleted or truncated- What happened?

What are some of the ways of knowing how the 100 M rows of record table got wiped out. Database is in Full recovery mode. I am not sure how doing daily backups are happening but before the truncate or ...
0
votes
1answer
664 views

How to log ALL queries made by users in SQL Server 2017 Standard? [duplicate]

Is there a possibility to do this? All queries and actions performed in any database need to be logged, because of in house compliance. I need information (and/or source) if we need MS SQL 2017 ...
0
votes
1answer
46 views

SQL Server 2008 R2 Auditing

I am new to database administration, and I need to implement auditing of all users of multiple databases. Can we audit multiple users of a multiple database by creating just one audit specification? ...
0
votes
1answer
48 views

MySQL 8.0 Triggers Current_User not working

I have this trigger that inserts a row to a table CREATE DEFINER=`root`@`localhost` TRIGGER `user_log_AFTER_INSERT` AFTER INSERT ON `user_log` FOR EACH ROW BEGIN INSERT INTO ...
2
votes
4answers
429 views

Auditing data changes in SQL Server

I am tasked with implementing auditing of data changes on our database. I am aware that there are commercial products for this, but I wanted to know which design would be better. For any given row ...
0
votes
1answer
50 views

How do I access a user's application username when that application connects to the DB?

I'd like to audit changes to a table in SQLServer using a trigger and an audit table to do so. End-users connect to the database through an application. If I use SYSTEM_USER to obtain the end user's ...
0
votes
2answers
59 views

Creating an auditing strategy when a user has been defined in a table instead of in SQL

To preface this post, I'm pretty new to database design, so please excuse me if there's already a simple or immediate answer to this post. In my DB I have a table called t_employees which acts as a "...
0
votes
1answer
380 views

How to trace a query on Firebird?

With SQL Server we can trace for a period of time, to get what queries are running. How can I do this with Firebird? I'm reading something on their website but there's only user trace like if the ...
1
vote
0answers
86 views

SQL Server Agent Alert does not pick up some of Events from Application Log written by SQL Server Audit

My end goal is to be emailed when new object (schema, table, procedure etc.) is created / altered / dropped at one of my databases on SQL Server I created a server-level audit, that writes to Windows ...
0
votes
3answers
598 views

How to Audit Successful Logins for certain logins only?

I need to setup auditing (logging) of successful logins on SQL Server (date, time, who), not for all logins on a server, but only for a small group of logins (developers) In short, me only ...
0
votes
2answers
81 views

Users who are connected into the database

I need some help on how to find all the users that are connected to one of my database. I should check this on weekends to find out all the users that connected during the week. Thank you.
0
votes
0answers
95 views

Good practices for audit data changes for SQL Server 2016

In my current project we are required to keep the records of data changes for the Employee table at least for specific field for NOW (it can be extended for all the fields later). We are also ...
0
votes
1answer
76 views

ORACLE 11g Know Insert Record Details which Failed to insert

I have started auditing insert records by user on failure to any table in my oracle 11g Database. I have used following command to do the same. AUDIT INSERT ANY TABLE BY SHENA BY ACCESS WHENEVER NOT ...
1
vote
0answers
18 views

Any way to pass additional parameters to Azure SQL Audit?

We are exploring Azure SQL Auditing capabilities. It gives us a list of all the queries executed and some additional data which is good. However, field server_principal_name is always reflecting a ...
1
vote
2answers
192 views

Queries not logging when using Extended Events in MS-SQL Server to track queries

I'm using MS-SQL Server 2012 Standard, running on Windows Server 2012 RTM. I used SSMS to create a Extended Event Session, where I used the built-in "Batch Query Tracking" template and save the result ...
0
votes
0answers
56 views

Generate security audits permission SECPOL - SQLSvcAccount keeps getting revoked\removed

I've followed all 3 instructions, as per: https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/write-sql-server-audit-events-to-the-security-log?view=sql-server-2017#...
2
votes
1answer
113 views

ORA-07445 when enabling Unified Auditing with Oracle Database 12.2

When enabling the below Unified Auditing policies in Oracle database 12.2, a generic error ORA-07445 in the v$alert_log and ORA-03114 for each new log-on occur: ORA-07445: exception encountered: ...
1
vote
2answers
582 views

Oracle Database Security - Audit Trail for specific user and specific module application

I want to enable audit trail for specific user, but only for sessions when this user connect to database using one specific module applications. For ex. I want to enable audit trail for user test1 ...
0
votes
2answers
193 views

LOG all SQL Server queries with their durations

Is there a way to log all Microsoft SQL Server queries executed on a certain server, with their respective durations? I'd like to be able to analyze all queries will a tool like what PGBADGER does ...