Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
1
vote
1answer
163 views

Some queries not logging using RDS's SQL Server with C2 Auditing enabled

Similar to a past issue I had with audited queries not showing when using Extended Events, I'm having an issue with queries not logging when using C2 Auditing on an RDS SQL Server instance. (I would ...
-2
votes
1answer
37 views

Oracle Delete From a View [duplicate]

I need to compile below query: delete from dba_audit_trail where TIMESTAMP > SYSDATE - 30;
0
votes
1answer
23 views

Passively load a monitoring shared object into an Oracle process

I'm trying to load my own code, which should add some security features to my environment, into each oracle BEQ dedicated process. The reason I'm posting this on this platform, is that I hope there is ...
0
votes
0answers
8 views

Oracle Audit Vault Create Custom Interactive Report

I have installed and configure Oracle Audit Vault server and i deploy my production database environment to Audit Vault which is sys.aud$ table. I can get predefined reports which is like entitlement ...
0
votes
0answers
9 views

SQL Server Audit Records Non-Committed Deletes

I have a table with a trigger as follows: CREATE TABLE AuditTable ( RecordTime DATETIME, RecordDetail NVARCHAR(100) ); -- trigger to block deletes and updates CREATE TRIGGER ...
0
votes
2answers
23 views

Default trace vs auditing in SQL Server

Currently I am working in an environment that has the default trace enabled and I would like to propose that we add SQL server auditing to our environment. I'm looking for some points to put forward ...
1
vote
2answers
106 views

SQL Server Logon Auditing and Reporting the data from a DB Table

Is it possible to configure a SQL Server database to write audit information for logons (success and failure) to a database table that can be queried? The requirement is to be able to generate a ...
2
votes
1answer
1k views

How to audit database user password changes in oracle 11g?

I want to record how many times or which user accounts passwords were changed using Oracle database auditing techniques. I also want to record any password changes done to system user account.
14
votes
1answer
68k views

how to get History of queries executed with username in SQL

I can get executed queries by using: SELECT deqs.last_execution_time AS [Time] ,dest.TEXT AS [Query] FROM sys.dm_exec_query_stats AS deqs CROSS APPLY sys.dm_exec_sql_text(deqs.sql_handle) AS dest ...
0
votes
3answers
31 views

Audit all insert, delete, update and select statements on a schema in Oracle 12.2

I cannot understand how to create a Unified Audit policy in order to audit all INSERT, UPDATE, DELETE and SELECT statements performed on all the objects within a specific schema. The goal is to track ...
0
votes
0answers
16 views

PostgreSQL - Details/counts in pg_dump file

I'm involved with converting a system from Oracle to PostgreSQL. We currently use database dumps quite heavily to move data between systems. For Postgresql, I'm using pdump -Fc and restoring using ...
2
votes
1answer
533 views

Oracle sys SYSDBA audit information to a report

I am trying to produce a monthly report on Audit. I am able to query the DBA_AUDIT_TRAIL, for all other users and no issue in that. I wanted to include the SYS/SYSDBA activities in this report and ...
0
votes
1answer
57 views

SQL SERVER auditing SELECT of a single column

Is this possible, or is table-level the most granular access? So far, Google search has shown nothing, and this screenshot does not mention column, but I thought I'd ask here. SQL Server version is ...
0
votes
1answer
46 views

Is it good practice to only delete through a trigger to enforce 'deleted by' auditing?

We've decided to design our database such that we actually delete rows when we want to delete some data, rather than just marking them as deleted, because the latter approach means that you always ...
1
vote
1answer
33 views

MSSQL Audits are growing out of control. 1gb every 4 minutes - any way to get size down?

I am trying to setup audits for a Veeam backup server. I used the audit specifications from STIG - https://www.stigviewer.com/stig/ms_sql_server_2016_instance/ I haven't setup any database auditing ...
0
votes
0answers
21 views

How can I find out who and when deleted particular database user from oracle database

I am trying to investigate some database users that used to exist in the system. I am interested when and who deleted the database user from the oracle database. Does oracle have any table or way ...
5
votes
1answer
7k views

Stored Procedure Processing and Error Log

I used to work for a company where they had this 3rd party Data warehouse Solution. Obviously all the objects and tables were hidden in the Supporting database so I don't have clear idea on what ...
2
votes
1answer
27 views

How to change user running audits mssql

I've been tasked with setting up our SQL server audits - despite having never done this before. So please forgive a really basic question. I setup a specific user, sqlAudits, that I would like to own ...
0
votes
0answers
9 views

Does mcafee mysql audit plugin not work on Percona Server 5.7.27-30?

My environment is 5.7.27-30-log Percona Server on CentOS 7.4. When I installed this plugin (audit-plugin-percona-5.7-1.1.7-866), I got the following error messages. mysql> INSTALL PLUGIN AUDIT ...
0
votes
1answer
20 views

Database: Storing multiple Types in single table or multiple intermediate delta tables

Using Java and Oracle. We need to update changes in Email, UserID of employee to third party. Actual table is Employee and intermediate table we keep which we will use for comparison of changes ...
1
vote
1answer
136 views

Audit trigger 91plus: setting up with proper role?

One of the solutions available for auditing in PostgreSQL is Audit trigger 91plus. wiki page github page There is a section in the wiki that is confusing to me: Changes by the table owner and ...
0
votes
1answer
19 views

SQL Server 2016 Audit Actions, Can DatabaseAuditSpecification capture param values used in statement?

I am using Schema_Object_access_Group audit action type. When I run a select, insert, update SQL statement, it records all statements nicely. For example, captured Sql statement looks like : UPDATE ...
1
vote
3answers
902 views

I need to audit all actions for a user on all databases - not sure best way

I have a user on a SQL Server that is used for executing SSRS queries. This user was made a sysadmin before I started at this job. I want to remove the sysadmin permission, but not break any reports. ...
2
votes
1answer
57 views

Get date from SQL Server audit filename

SQL Server audit filenames use the following pattern: Name_GUID_PartitionNumber_Timestamp.sqlaudit An example filename below: Audit-ObjectChanges_2D94C1E8-CCAD-405F-A9F2-...
3
votes
2answers
1k views

Java Spring application Database triggers auditing - how to provide the right user that made the change

We are developing a new web application. one of the most basic requirement is to audit all entities changes into a separate table. We would like to use DB triggers for that purpose. We use MySQL as ...
0
votes
1answer
16 views

Auditing user queries of specific rows in a table

Is it possible in SQL Server 2017 and upwards to audit the access to certain rows in a table? Imagine a customer table, and we wanted to track when users selected the data for premium customers ...
-1
votes
1answer
73 views

How To Delete Record From dba_audit_trail in Oracle 11gR2

I want to delete records older than one month from AUD$ table, but I have to do this on dba_audit_trail, because I have to do this job according dba_audit_trail's timestamp. I can't find any clear ...
0
votes
2answers
32 views

Oracle limit the number of files of audit

I would like to know how to limit the number of files of audit generated in the audit directory, I have an Oracle 12c database. The AUDIT_TRAIL parameter is equal to NONE, however it continues to ...
0
votes
0answers
18 views

Specific User activity logging for PostgreSQL

Scenario: I want to enable user activity events for PostgreSQL(9.6). Enabling "log_statement = 'all'" will achieve this goal.However, I cannot enable this option as it is degrading server performance(...
0
votes
1answer
73 views

Track MySQL Procedure Changes in MySQL

We want to keep track of changes being done to MySQL procedures only, actually recently our procedures seem to have overwritten to some previous versions and we were unable to track it that who did ...
0
votes
1answer
25 views

Why doesn't MariaDB server recognise Server Audit settings in config file?

I'm trying to implement the Server Audit plugin that is built-in with MariaDB 10.4. I've added the settings to the my.ini config file, running on Windows 10. [server] ... #Audit Settings ...
0
votes
0answers
4 views

monitor collection field in mongo

there is a way to check an audit on a field in a certain collection in Mongo. I mean when/who changed a filed in a collection? something that already happened
0
votes
1answer
217 views

Get the deleted value using while looping through the columns

I wrote a trigger to do auditing. To capture all the changes, I loop through the list of columns. The problem I'm having (see code below), when I try to set the OldValue using the @fieldname, I get ...
0
votes
2answers
100 views

SQL Server 2008 R2 Auditing

I am new to database administration, and I need to implement auditing of all users of multiple databases. Can we audit multiple users of a multiple database by creating just one audit specification? ...
2
votes
1answer
3k views

Where can I get error messages from SQL Server Auditing?

Where can I get information about the audit process failing to start? I'm setting up auditing on my MS SQL 2014 server. I've created an AUDIT and an associated AUDIT SPECIFICATION, but when I try to ...
0
votes
2answers
77 views

SQL Server: Who created an audit and who altered it last?

I am trying to find out who created an audit (found under Audits) but I don't seem to have any luck. I've already tried many queries such as these: Blog 1, Blog 2, Blog 3 And SELECT * FROM [sys]....
0
votes
1answer
117 views

Storing revisions and relations between revised items in 1:N and N:N scenarios for audits

I have several of the following situations in a MySQL schema that I design for a custom CRM/ERP solution. 1:N related tables SO and SO_ITEMS (SO is just one example I have several) that both need to ...
3
votes
2answers
2k views

Getting the only updated field using a postgreSQL trigger?

Is there any way to use a trigger which can get the only updated field from a record? I am just testing the audit trail log so it can save the field name alongside its other information when it is ...
0
votes
1answer
40 views

Why some triggers run exactly at the same time?

I wrote a simple audit with triggers. when a trigger called, the data inside the trigger (inserted and deleted rows) are sent through broker to a procedure to write them in the Master Audit Table. ...
0
votes
1answer
127 views

Is it possible to audit query results in SQL Server?

I want to find out if it is possible to audit the results of any query that gets executed on an instance of SQL Server. We currently have C2 auditing enabled, but this only showed what query was ...
0
votes
1answer
34 views

Audit OSQL command shutting down a SQL Server

I need to determine when, and by whom, a SQL Server was shutdown using the osql command. The osql command takes user name and password input. Are there any specific Windows Event logs generated to ...
0
votes
1answer
463 views

SQL Server AUDIT/event_time

I am using SQL Server 2012 Audit and when I look through the captured events I can see that event_time does not show the correct time. Actually it shows 5 hours earlier than time on the server. Do you ...
1
vote
1answer
37 views

How to determine if Oracle Java classes are being used

Oracle EE 12.1.0.2 As part of a general clean up of a legacy application prior to a migration I'm trying to determine what objects are actually in use. There are some 230 JAVA class objects in my ...
0
votes
1answer
97 views

SQL-Server schema audit trigger - possible to get old view/sp/function definition?

I'm using the below database-level trigger for schema-change-auditing. It works fine, but if I do (drop view - create view), it only stores the sql that created the view, not the one that is dropped. ...
0
votes
1answer
69 views

MySQL Plugin failed to install due to “undefined symbol”

For several years now I have used the MariaDB Audit Plugin on my MySQL databases. I am now looking to start Upgrading my databases to MySQL 8, and so have just tried installing it onto MySQL 8.0.19, ...
0
votes
0answers
46 views

Audit sysadmin activities on SQL Server

because of GDPR we need a system that monitores all activities that administrators does on an SQL Server. First goal is to audit sysadmin activities (selects too), but if possible activities of ...
0
votes
1answer
140 views

SQL Server Audit Clutters Error log

I have a Server level Audit running and informational messages are continuously placed in the SQL Error log (every hour): Audit: Server Audit: 65976, Initialized and Assigned State: STARTED Audit: ...
1
vote
1answer
62 views

Discover who changed SQL Server service state

There's any way to find out who stopped\restarted\started the following services ? SQL Server Database Engine SQL Server Agent SQL Server Analysis Services Thanks !
0
votes
1answer
66 views

Is “SQL Server Auditing” what I'm looking for?

Man... this feels like a broad question, so apologies in advance. The word "auditing" seems to have some depth in the DBA world, and I may not be asking the right question when I google. I'm trying ...
0
votes
0answers
48 views

How to use MariaDB server_audit plugin on MySQL

I need to log connections on MySQL on Windows. When I google it, I saw some advice to use MariaDB server_audit plugin on MySQL. (for example: here) So, I gave it a try, but I failed. I copied the ...

1
2 3 4 5
7