Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
1
vote
1answer
268 views

Audit trigger 91plus: setting up with proper role?

One of the solutions available for auditing in PostgreSQL is Audit trigger 91plus. wiki page github page There is a section in the wiki that is confusing to me: Changes by the table owner and ...
0
votes
1answer
329 views

Why doesn't MariaDB server recognise Server Audit settings in config file?

I'm trying to implement the Server Audit plugin that is built-in with MariaDB 10.4. I've added the settings to the my.ini config file, running on Windows 10. [server] ... #Audit Settings ...
0
votes
1answer
104 views

Track MySQL Procedure Changes in MySQL

We want to keep track of changes being done to MySQL procedures only, actually recently our procedures seem to have overwritten to some previous versions and we were unable to track it that who did ...
1
vote
1answer
227 views

Is it possible to audit query results in SQL Server?

I want to find out if it is possible to audit the results of any query that gets executed on an instance of SQL Server. We currently have C2 auditing enabled, but this only showed what query was ...
1
vote
1answer
204 views

Some queries not logging using RDS's SQL Server with C2 Auditing enabled

Similar to a past issue I had with audited queries not showing when using Extended Events, I'm having an issue with queries not logging when using C2 Auditing on an RDS SQL Server instance. (I would ...
0
votes
2answers
36 views

Auditing via change data capture (CDC) for MSSQL

I want to ask the DBA community about best practices for auditing the MSSQL database. I set up CDC MSSQL and experience some difficulties with it. It's working all fine until I change the structure of ...
0
votes
1answer
106 views

Using views with no insert table VS Audit tables

I(not a DBA) am considering designing Audit tables for an application that needs to be really fast as well fully audited (undo is not necessary). I referred to some from so and I found variations of ...
0
votes
1answer
132 views

Storing revisions and relations between revised items in 1:N and N:N scenarios for audits

I have several of the following situations in a MySQL schema that I design for a custom CRM/ERP solution. 1:N related tables SO and SO_ITEMS (SO is just one example I have several) that both need to ...
0
votes
0answers
14 views

TLS Encryption Logging/Auditing in Oracle

I use Oracle only occasionally, but have heard that it is pretty easy to verify if your Oracle encryption is working (e.g. this post Verify if the client is connecting to the Oracle database using ...
-1
votes
1answer
357 views

Get the deleted value using while looping through the columns

I wrote a trigger to do auditing. To capture all the changes, I loop through the list of columns. The problem I'm having (see code below), when I try to set the OldValue using the @fieldname, I get ...
1
vote
1answer
128 views

Discover who changed SQL Server service state

There's any way to find out who stopped\restarted\started the following services ? SQL Server Database Engine SQL Server Agent SQL Server Analysis Services Thanks !
1
vote
1answer
291 views

Could you monitor all changes made within a postgresql database by somehow subscribing to the replication log?

I've been reading about postgresql replication and was wondering if it was somehow possible to listen to the replication binary log and push that to some tool like sumologic or splunk so that any ...
0
votes
1answer
29 views

Getting database-level audit logs without database audit specification

I have server level auditing on SQL Server 2014. Why am I receiving database-level audit events (such as SELECT, INSERT, UPDATE, DELETE, etc.), even though there are no database audit specifications? ...
1
vote
2answers
877 views

SQL Server Logon Auditing and Reporting the data from a DB Table

Is it possible to configure a SQL Server database to write audit information for logons (success and failure) to a database table that can be queried? The requirement is to be able to generate a ...
0
votes
0answers
22 views

FGA AUDITING does not record audit

hello i dont know why my fga auditing is not working my code EXEC DBMS_FGA.ADD_POLICY(OBJECT_SCHEMA=>'PLSQL', OBJECT_NAME=>'REGIONS', AUDIT_COLUMN=>'REGION_NAME', POLICY_NAME=>'REGPOL', ...
3
votes
1answer
2k views

How to audit database user password changes in oracle 11g?

I want to record how many times or which user accounts passwords were changed using Oracle database auditing techniques. I also want to record any password changes done to system user account.
3
votes
4answers
516 views

How to get historical queries in SQL Server, based on time

Please how do I get the query that was running at a specific time in SQL Server 2016? Something similar to AWR report in Oracle? We need to know what was happening at a specific time in the past ...
2
votes
1answer
602 views

Oracle sys SYSDBA audit information to a report

I am trying to produce a monthly report on Audit. I am able to query the DBA_AUDIT_TRAIL, for all other users and no issue in that. I wanted to include the SYS/SYSDBA activities in this report and ...
0
votes
0answers
35 views

db2 How to get the application user from delete events

We use temporal tables to store the history of all changes to specific tables in the db. But we also need the user who made the changes. While on db2 side the user is the application, the application ...
1
vote
1answer
10k views

Oracle audit: Only 'SESSION REC' in ACTION_NAME column

I was asked to generate a report of operations performed on certain Oracle 9i tables in a given period of time. When I query the DBA_AUDIT_TRAIL table I only get SESSION REC in the ACTION_NAME column. ...
0
votes
1answer
47 views

Use trigger on DELETE to retrieve original SQL command and user who did it

I'm trying to create an audit log to store all delete commands on some tables, on MSSQL 2012. What I need is the username that executed it and the command executed, then I can insert them on a log ...
0
votes
0answers
25 views

Scheduled job not present on database, but visible from dba_scheduler_job_log

I'm seeing this error in the alert log (sorry, it's in italian!): *** 2021-09-14 23:50:17.891 *** SESSION ID:(249.6897) 2021-09-14 23:50:17.891 *** CLIENT ID:() 2021-09-14 23:50:17.891 *** SERVICE ...
1
vote
1answer
40 views

Where does PMM store login details for DBs?

I have to audit the logins used by our services and it's not clear where I find the logins used for our PMM instance to connect to the remote DBs.
0
votes
2answers
683 views

MySQL Plugin failed to install due to "undefined symbol"

For several years now I have used the MariaDB Audit Plugin on my MySQL databases. I am now looking to start Upgrading my databases to MySQL 8, and so have just tried installing it onto MySQL 8.0.19, ...
1
vote
1answer
54 views

Find who is selecting from table SQL Server

We have a table that has a very long update process that I think was from a no longer used program. No one can seem to tell me if anyone still uses it or not. What is the best way to log which users ...
0
votes
1answer
92 views

How to include the oracle database name to os audit trail?

My DB settings: Connected to: Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production Version 19.12.0.0.0 SYS@CDBXXX1> unified_audit_common_systemlog string ...
4
votes
1answer
287 views

Problem with enabling System Audit (Firebird's Trace and Audit Services)

I would like to enable System Audit on my Firebird 2.5.9.27139 (x64) database (Windows 10), to inspect all queries performed on it. I've already read some docs about what the configuration file should ...
1
vote
0answers
32 views

Filtering for user transactions in Azure Log Analytics

We have audit logging in Azure Log Analytics set up for an Azure SQL Database we operate. I would like to query these logs to view user transactions to track down queries that have unintended ...
0
votes
1answer
121 views

How to send alert on SQL Shutdown due to Audit Failure

Looking for a way to implement this STIG. What method should I use to monitor SQL Server, when it is shutdown due to "Shutdown on Audit Failure"? SQL Server must provide an immediate real-...
0
votes
1answer
52 views

Oracle Fine-Grained Access (FGA) auditing excluding one source

I want to audit DML statements coming from other places than application user "tomcat" (OS_USER attribute). I want to focus only on developers or support team changing data in any way. DML ...
0
votes
1answer
77 views

Audit table and foreign key

I have a database with multiples tables that must be audited. As an example, I have a table of objects defined with a unique ID, a name, and a description. The name will always be the same. It is not ...
2
votes
1answer
158 views

SQL Server DML auditing - Triggers vs SQL Server Audit Feature (vs temporal tables vs change data capture)

I am looking to implement an auditing process on an instance I have on SQL Server 2017. However, I am not finding a complete conclusion on which auditing feature would be best to use for a DB with a ...
3
votes
2answers
2k views

Java Spring application Database triggers auditing - how to provide the right user that made the change

We are developing a new web application. one of the most basic requirement is to audit all entities changes into a separate table. We would like to use DB triggers for that purpose. We use MySQL as ...
0
votes
0answers
39 views

How can I link together auditing of the sql and before and after values for row updates in Oracle

I had a number of triggers that used to work in Oracle 8i, that worked to capture both the before, and after values of a row, as well as the sql used to do the update. (I realize there would be cases ...
1
vote
0answers
4k views

Where can I get error messages from SQL Server Auditing?

Where can I get information about the audit process failing to start? I'm setting up auditing on my MS SQL 2014 server. I've created an AUDIT and an associated AUDIT SPECIFICATION, but when I try to ...
0
votes
1answer
32 views

MSSQL - How to log every rpc_completed event into a table?

I want to log the Execution Time and Parameters for every stored procedure call on my database. What I reached by searching is to use extended events as the latest method with minimum performance ...
0
votes
1answer
39 views

MySQL - Information_schema Events - How persistent or retention is managed

I'm a MS SQL guy and understand agent job history. I'm now working with MySQL. I've searched hi and low but I can't find any solid info on how event data within information_schema.events is persisted, ...
1
vote
4answers
4k views

Audit all insert, delete, update and select statements on a schema in Oracle 12.2

I cannot understand how to create a Unified Audit policy in order to audit all INSERT, UPDATE, DELETE and SELECT statements performed on all the objects within a specific schema. The goal is to track ...
1
vote
1answer
110 views

An INSERT statement triggers the SQL Server Audit to write it down in the logs although INSERT is not listed as an Audit Action

Background: I am trying to keep a track record of what users are querying in the database. One option I found is to create a Server and Database Audit Specification. I did not want to include INSERT ...
0
votes
0answers
24 views

Check when a privilege was granted - PostgreSQL

Is there any information_schema view that can tell when an object privilege was granted? The pg_namespace view doesn't have that. select * from pg_namespace join lateral ( SELECT * from ...
1
vote
1answer
233 views

Extended Events Login audit - Reduce login noise

We are looking for the optimal sql login audit solution, with usable filtering. Thus far we have looked into Server Audits and profiler but have concluded that extended events look most promising, ...
0
votes
1answer
62 views

How to audit a specific query in Oracle

I want to audit a specific SQL query in Oracle. However I think we can audit only users or table level. For example I want to audit 'audit statements', such as who run the "AUDIT CREATE SESSION ...
1
vote
0answers
53 views

MS SQL Server Enterprise 2016 is truncating the audited select statements, how do we fix it?

TL;DR; I am getting SELECT as the audit output instead of the actual (suspected) query SELECT DISTINCT CONVERT(varchar, DecryptByPassphrase(getkey(N'key1'), FIELD1)) as DECRYPTED_FIELD1 FROM view1 ...
0
votes
1answer
41 views

Identify table usage in sql server before we stop the load

I tried browsing this across lot of links but cant get much of help so i am posting this question which sound bit similar. We have quite some tables which are being planned from our app team that they ...
0
votes
1answer
41 views

Find if and when a Query was run?

I am trying to get to the root of a problem and need to see if and when a specific Delete Query was run on my MS SQL Server. The command would have come from my .NET website. My Server is Windows 2012 ...
0
votes
3answers
211 views

Auditing of database connections in SQL Server 2008 R2

We are finally planning to close down our last SQL Server 2008 R2 server. Before we can proceed with this we need to track what users are connecting to which databases. We have tried different options ...
0
votes
2answers
1k views

LOG all SQL Server queries with their durations

Is there a way to log all Microsoft SQL Server queries executed on a certain server, with their respective durations? I'd like to be able to analyze all queries will a tool like what PGBADGER does ...
1
vote
4answers
3k views

Query to find users with passwords same as their username in Oracle

I'm writing an Oracle audit script where I need to find users in a database who have set their passwords to be the same as their username, e.g. dbaadmin/dbaadmin. The query would need to get the list ...
1
vote
1answer
40 views

Audit succesfull logons , loging every 2 seconds

I created an audit to audit only succesfull logons. But the problem is, I did it in a test environment and it's loging a connection every second Did I do something wrong ? I only selected SUCCESFULL ...
0
votes
2answers
94 views

SQL Server: Who created an audit and who altered it last?

I am trying to find out who created an audit (found under Audits) but I don't seem to have any luck. I've already tried many queries such as these: Blog 1, Blog 2, Blog 3 And SELECT * FROM [sys]....

1
2 3 4 5
8