We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
0
votes
2answers
542 views

SQL Server LockMatchID Command

I am seeing calls like those shown below in my SQL Server Audit logs but have no idea what it means. A google search turned up a possible relationship with compiles/recompiles. The line (or similar ...
0
votes
1answer
133 views

Some queries not logging using RDS's SQL Server with C2 Auditing enabled

Similar to a past issue I had with audited queries not showing when using Extended Events, I'm having an issue with queries not logging when using C2 Auditing on an RDS SQL Server instance. (I would ...
2
votes
1answer
3k views

Where can I get error messages from SQL Server Auditing?

Where can I get information about the audit process failing to start? I'm setting up auditing on my MS SQL 2014 server. I've created an AUDIT and an associated AUDIT SPECIFICATION, but when I try to ...
1
vote
0answers
26 views

Oracle Still Auditing after NOAUDIT

We're redoing what is and isn't being auditing in a database my team has been put in charge of. Old audit settings were producing ~2M audit entries a day. Audit_trail parameter is set to DB. So we ...
0
votes
0answers
52 views

How can I import the fga_log$ table with impdp Oracle 12 R1

I am trying to import with impdp a save made as follows: expdp '"sys/mmm as sysdba"' full=y COMPRESSION=ALL DIRECTORY=LOGICS_EXPORTS COMPRESSION_ALGORITHM=BASIC LOGTIME=ALL CONTENT=ALL DUMPFILE=FULL-...
0
votes
1answer
28 views

Oracle 12c how to purge the FGA audit records before a certain date

please I need to know how to purge the FGA audit records before a certain date, I have an Oracle 12c R1 database in which the audit with FGA is implemented, the tables of this are in a tablespace ...
1
vote
1answer
41 views

Auditing all User activities

Today I had to grant sysadmin rights for 2 users. ;( As I couldn't change that, I at least want to see, what they are doing, so I am looking for a way, to audit all activities by these 2 Users. ...
0
votes
1answer
340 views

SQL Server AUDIT/event_time

I am using SQL Server 2012 Audit and when I look through the captured events I can see that even_time does not show the correct time. Actually it shows 5 hours earlier than time on the server. Do you ...
2
votes
1answer
475 views

Oracle sys SYSDBA audit information to a report

I am trying to produce a monthly report on Audit. I am able to query the DBA_AUDIT_TRAIL, for all other users and no issue in that. I wanted to include the SYS/SYSDBA activities in this report and ...
2
votes
1answer
31 views

SQL Server Audit File Metrics Information

I'm currently working in an environment that requires we enable SQL Server Audit, enterprise-wide. We generate .sqlaudit files as we have retention and access guidelines, and I'm finding that we need ...
4
votes
2answers
5k views

MySQL Script to automate creation of audit (history) tables and triggers?

For regulatory and fraud requirements, we need to record every change to most of the tables in the DB. The way we did this very successfully with a previous project is to have a copy of each table, ...
0
votes
1answer
31 views

Where is my audit as Oracle sys audit is enable

On an Oracle 11gr1 database, SYS audit is enabled: SQL> show parameter audit NAME TYPE VALUE ------------------------------------ ------...
0
votes
1answer
46 views

Enabling audit in Oracle

I have a table 'class' owned by the schema 'test' and I need to audit all operations on the particular table. audit INSERT,UPDATE,DELETE ON test.class -- will this be sufficient to do the trick? ...
1
vote
1answer
58 views

Managing AUD$ without DBMS_AUDIT_MGMT

I have a SYSTEM's table AUD$ where AUDIT records are stored. My AUDIT_TRAIL is set to DB,EXTENDED. I am on Oracle DB version 12c (12.2.0.1.0). With time (in 3 years) my AUD$ table grew to 500GB in ...
2
votes
1answer
35 views

Get User for Audit Entries

I am trying to construct history entries for my application tables. (Basically a "who changed what and when" set of tables.) My problem is that I have a lot of users. Well over a thousand. My ...
1
vote
3answers
736 views

I need to audit all actions for a user on all databases - not sure best way

I have a user on a SQL Server that is used for executing SSRS queries. This user was made a sysadmin before I started at this job. I want to remove the sysadmin permission, but not break any reports. ...
1
vote
0answers
19 views

Audit trail database design for multiple related tables [closed]

We have the database design requirement for audit trail purpose in MySQL 5.7. There is one main table and there are few sub-tables to the main table. For every record in the main table, there will ...
3
votes
2answers
1k views

Java Spring application Database triggers auditing - how to provide the right user that made the change

We are developing a new web application. one of the most basic requirement is to audit all entities changes into a separate table. We would like to use DB triggers for that purpose. We use MySQL as ...
0
votes
0answers
12 views

SQL Server - Change AuditLevel on Linux hosted instance

just wondering if it's possible to change the AuditLevel on SQL Server 15.0.1800.32 (2019) hosted on Linux to "Failed logins only". Currently it's set to audit failed and successful logins and I ...
1
vote
1answer
48 views

Can Extended Events used instead of Auditing?

In BOL it is mentioned does this mean Extended Events can capture all the events that are traced by auditing? Can we get all the functionalities of auditing just by using XEvents? thanks
29
votes
4answers
93k views

How to find out who deleted some data SQL Server

My boss had a query from a customer yesterday asking how they could find out who deleted some data in their SQL Server database (it is the express edition if that matters). I thought this could be ...
44
votes
9answers
5k views

How should deletions be handled in the database?

I'd like to implement an "undelete" feature in a web application such that a user can change her mind and recover a deleted record. Thoughts on how to implement this? Some options I've considered are ...
0
votes
1answer
189 views

Get the deleted value using while looping through the columns

I wrote a trigger to do auditing. To capture all the changes, I loop through the list of columns. The problem I'm having (see code below), when I try to set the OldValue using the @fieldname, I get ...
6
votes
1answer
6k views

SQL Server Audit Specification - filter DML by all but one user

I'm setting up a database audit. I'd like to capture any DML change that is issued by database user other than the service account related to the application. In short, this is to prove to our ...
0
votes
0answers
19 views

Audit Trail Settings in SQL Server 2005

Where I can find the Audit Trail Settings in SQL Server 2005. Google search gives link to the topics like "how can we create audit tables", but I just need to know where I can see the current settings,...
0
votes
1answer
106 views

Storing revisions and relations between revised items in 1:N and N:N scenarios for audits

I have several of the following situations in a MySQL schema that I design for a custom CRM/ERP solution. 1:N related tables SO and SO_ITEMS (SO is just one example I have several) that both need to ...
3
votes
1answer
3k views

MySQL audit and general log

May ask for the difference of MySQL Audit log plugin and general log? I looking for any activities done in a MySQL server.
0
votes
1answer
28 views

Why this system table doesn't appear on dictionary table?

How you can see I am the sys: SQL> show user; USER is "SYS" When I search the table in the dictionary the dictionary returns no rows: select table_name from dictionary where table_name like ...
0
votes
1answer
20 views

DB2 Audit Policy not producing EXECUTE data

I'm trying to set up an Audit facility on a DB2 AWSE V10.5 FP5 database running on Red Hat Linux Server 6.8. The definition for the policy is : ALTER AUDIT POLICY Failures CATEGORIES ...
1
vote
1answer
21 views

Auditing of modification of change to encryption keys

Is it possible to audit/log any attempts or actual changes to the keys used in the encryption hierarchy? We are using 2014 Enterprise edition and have recently enabled TDE across our databases and ...
0
votes
1answer
58 views

SQL Server Auditing [closed]

Situation: I am looking into getting some basic SQL auditing set up (for both compliance and security), for both Server and Database level specifications. I know that the specification groups should ...
1
vote
1answer
41 views

Optimize MySQL query retrieval from audit log table

I am running MySQL InnoDB 5.6. This is my first post, so please bare with me of any mistakes. I have this schema: I have a list of invoices in the invoice table, and if I want to see all the ...
0
votes
1answer
2k views

What's the difference between aud$ and dba_audit_trail tables in Oracle database?

I'm studying about audit in Oracle database and when I configure the audit using audit_trail = db the Oracle stores in the two tables
1
vote
0answers
27 views

SQL Server Audit Specifications Not Writing to the Security Log

I've come across an issue where SQL Server database audit specifications have stopped writing to the security event log. The audit object will write events to a SQL audit file or the Application ...
0
votes
1answer
83 views

Is it possible to audit query results in SQL Server?

I want to find out if it is possible to audit the results of any query that gets executed on an instance of SQL Server. We currently have C2 auditing enabled, but this only showed what query was ...
0
votes
0answers
25 views

Find when tables were deleted historically

We've had an issue where data tables have been deleted from a client applications SQL Server Database (Dynamics Navision). Unfortunately we had an outage and the SQL Servers were affected by this, ...
0
votes
0answers
43 views

SQL Server query auditing in production without drastically affecting performance

Has anyone successfully turned on SQL Server auditing (extended events) to keep track of queries being run in a production environment while having the database still perform well? If you did, I'm ...
0
votes
1answer
68 views

SQL-Server schema audit trigger - possible to get old view/sp/function definition?

I'm using the below database-level trigger for schema-change-auditing. It works fine, but if I do (drop view - create view), it only stores the sql that created the view, not the one that is dropped. ...
1
vote
1answer
67 views

Audit trigger 91plus: setting up with proper role?

One of the solutions available for auditing in PostgreSQL is Audit trigger 91plus. wiki page github page There is a section in the wiki that is confusing to me: Changes by the table owner and ...
0
votes
1answer
54 views

Log all accessed objects during a certain time period

We are running quite a few tests for our software that require a certain set of databases. These databases are usually huge, while most of the data in there will not be used by any testcase. In order ...
0
votes
1answer
33 views

Using views with no insert table VS Audit tables

I(not a DBA) am considering designing Audit tables for an application that needs to be really fast as well fully audited (undo is not necessary). I referred to some from so and I found variations of ...
1
vote
0answers
22 views

How to measure durations (import, update) in Postgres DB?

we have a Postgres database which receives data by an extern web client. We would like to measure the duration of the UPDATE, INSERT and DELETE processes on our tables. Until now, we used the ...
0
votes
1answer
52 views

Who created that table in SQL Server?

I was wondering if there was a way to see who created a table in SQL Server 2017.
4
votes
1answer
2k views

Track all modifications to a PostgreSQL table

We have a table which has only roughly 500 rows, but it is very important for us. I want see all changes which happen to this table. The changes should get tracked with a timestamp. I don't want the ...
1
vote
1answer
71 views

Server Principal SID showing as NULL and name as empty string

In my SQL Server 2016 server,i set up a user logins Audit for Login successful and Login Failed action. Here is the script. USE [master] GO CREATE SERVER AUDIT SPECIFICATION [...
3
votes
1answer
46 views

Tracking grant violations

We are changing one of our application user logins from being dbowner to a more granular permission scheme--finally. Is there a way from within SQL Server 2016 that I can track permission violations? ...
0
votes
2answers
69 views

SQL Server: Who created an audit and who altered it last?

I am trying to find out who created an audit (found under Audits) but I don't seem to have any luck. I've already tried many queries such as these: Blog 1, Blog 2, Blog 3 And SELECT * FROM [sys]....
0
votes
0answers
26 views

What SQL-Queries are created with ExaPlus to produce the menu in the left side?

I am considering what information should be provided under Article 15 (3) GDPR regarding the use of Exasol and ExaPlus.I don’t have SELECT ANY DICTIONARY system privilege to figure out this question ...
2
votes
0answers
54 views

Questions and advice for complying with Federal tax information (FTI) Security Guidelines for Federal, State and Local Agencies per Publication 1075

I've been able to find writings on compliance topics (e.g. HIPAA, SARBANES-OXLEY, PCI DSS) but I haven't found much on FTI (Federal tax information) and Publication 1075 outside of the IRS website ...
0
votes
1answer
42 views

How to check Auditing in Azure MSSQL MI?

I know that auditing is currently enabled in my azure MSSQL server, but how can I access these log files? Could it be done through SSMS? I need to know details about user activity in my databaase.