Questions tagged [audit]

Database auditing involves observing a database so as to be aware of the actions of database users.

Filter by
Sorted by
Tagged with
0
votes
0answers
7 views

Oracle Audit Vault Create Custom Interactive Report

I have installed and configure Oracle Audit Vault server and i deploy my production database environment to Audit Vault which is sys.aud$ table. I can get predefined reports which is like entitlement ...
0
votes
0answers
9 views

SQL Server Audit Records Non-Committed Deletes

I have a table with a trigger as follows: CREATE TABLE AuditTable ( RecordTime DATETIME, RecordDetail NVARCHAR(100) ); -- trigger to block deletes and updates CREATE TRIGGER ...
0
votes
2answers
23 views

Default trace vs auditing in SQL Server

Currently I am working in an environment that has the default trace enabled and I would like to propose that we add SQL server auditing to our environment. I'm looking for some points to put forward ...
0
votes
0answers
16 views

PostgreSQL - Details/counts in pg_dump file

I'm involved with converting a system from Oracle to PostgreSQL. We currently use database dumps quite heavily to move data between systems. For Postgresql, I'm using pdump -Fc and restoring using ...
0
votes
1answer
57 views

SQL SERVER auditing SELECT of a single column

Is this possible, or is table-level the most granular access? So far, Google search has shown nothing, and this screenshot does not mention column, but I thought I'd ask here. SQL Server version is ...
0
votes
3answers
28 views

Audit all insert, delete, update and select statements on a schema in Oracle 12.2

I cannot understand how to create a Unified Audit policy in order to audit all INSERT, UPDATE, DELETE and SELECT statements performed on all the objects within a specific schema. The goal is to track ...
0
votes
1answer
46 views

Is it good practice to only delete through a trigger to enforce 'deleted by' auditing?

We've decided to design our database such that we actually delete rows when we want to delete some data, rather than just marking them as deleted, because the latter approach means that you always ...
0
votes
0answers
20 views

How can I find out who and when deleted particular database user from oracle database

I am trying to investigate some database users that used to exist in the system. I am interested when and who deleted the database user from the oracle database. Does oracle have any table or way ...
1
vote
1answer
33 views

MSSQL Audits are growing out of control. 1gb every 4 minutes - any way to get size down?

I am trying to setup audits for a Veeam backup server. I used the audit specifications from STIG - https://www.stigviewer.com/stig/ms_sql_server_2016_instance/ I haven't setup any database auditing ...
0
votes
0answers
9 views

Does mcafee mysql audit plugin not work on Percona Server 5.7.27-30?

My environment is 5.7.27-30-log Percona Server on CentOS 7.4. When I installed this plugin (audit-plugin-percona-5.7-1.1.7-866), I got the following error messages. mysql> INSTALL PLUGIN AUDIT ...
0
votes
1answer
20 views

Database: Storing multiple Types in single table or multiple intermediate delta tables

Using Java and Oracle. We need to update changes in Email, UserID of employee to third party. Actual table is Employee and intermediate table we keep which we will use for comparison of changes ...
0
votes
1answer
19 views

SQL Server 2016 Audit Actions, Can DatabaseAuditSpecification capture param values used in statement?

I am using Schema_Object_access_Group audit action type. When I run a select, insert, update SQL statement, it records all statements nicely. For example, captured Sql statement looks like : UPDATE ...
2
votes
1answer
54 views

Get date from SQL Server audit filename

SQL Server audit filenames use the following pattern: Name_GUID_PartitionNumber_Timestamp.sqlaudit An example filename below: Audit-ObjectChanges_2D94C1E8-CCAD-405F-A9F2-...
2
votes
1answer
27 views

How to change user running audits mssql

I've been tasked with setting up our SQL server audits - despite having never done this before. So please forgive a really basic question. I setup a specific user, sqlAudits, that I would like to own ...
-2
votes
1answer
35 views

Oracle Delete From a View [duplicate]

I need to compile below query: delete from dba_audit_trail where TIMESTAMP > SYSDATE - 30; But it doesn't allow to delete from a view. I HAVE TO delete records from dba_audit_trail, I can't use ...
0
votes
1answer
16 views

Auditing user queries of specific rows in a table

Is it possible in SQL Server 2017 and upwards to audit the access to certain rows in a table? Imagine a customer table, and we wanted to track when users selected the data for premium customers ...
-1
votes
1answer
65 views

How To Delete Record From dba_audit_trail in Oracle 11gR2

I want to delete records older than one month from AUD$ table, but I have to do this on dba_audit_trail, because I have to do this job according dba_audit_trail's timestamp. I can't find any clear ...
0
votes
2answers
32 views

Oracle limit the number of files of audit

I would like to know how to limit the number of files of audit generated in the audit directory, I have an Oracle 12c database. The AUDIT_TRAIL parameter is equal to NONE, however it continues to ...
0
votes
0answers
18 views

Specific User activity logging for PostgreSQL

Scenario: I want to enable user activity events for PostgreSQL(9.6). Enabling "log_statement = 'all'" will achieve this goal.However, I cannot enable this option as it is degrading server performance(...
0
votes
1answer
23 views

Why doesn't MariaDB server recognise Server Audit settings in config file?

I'm trying to implement the Server Audit plugin that is built-in with MariaDB 10.4. I've added the settings to the my.ini config file, running on Windows 10. [server] ... #Audit Settings ...
0
votes
0answers
4 views

monitor collection field in mongo

there is a way to check an audit on a field in a certain collection in Mongo. I mean when/who changed a filed in a collection? something that already happened
0
votes
1answer
40 views

Why some triggers run exactly at the same time?

I wrote a simple audit with triggers. when a trigger called, the data inside the trigger (inserted and deleted rows) are sent through broker to a procedure to write them in the Master Audit Table. ...
0
votes
1answer
34 views

Audit OSQL command shutting down a SQL Server

I need to determine when, and by whom, a SQL Server was shutdown using the osql command. The osql command takes user name and password input. Are there any specific Windows Event logs generated to ...
1
vote
1answer
37 views

How to determine if Oracle Java classes are being used

Oracle EE 12.1.0.2 As part of a general clean up of a legacy application prior to a migration I'm trying to determine what objects are actually in use. There are some 230 JAVA class objects in my ...
0
votes
1answer
66 views

MySQL Plugin failed to install due to “undefined symbol”

For several years now I have used the MariaDB Audit Plugin on my MySQL databases. I am now looking to start Upgrading my databases to MySQL 8, and so have just tried installing it onto MySQL 8.0.19, ...
0
votes
0answers
44 views

Audit sysadmin activities on SQL Server

because of GDPR we need a system that monitores all activities that administrators does on an SQL Server. First goal is to audit sysadmin activities (selects too), but if possible activities of ...
1
vote
1answer
62 views

Discover who changed SQL Server service state

There's any way to find out who stopped\restarted\started the following services ? SQL Server Database Engine SQL Server Agent SQL Server Analysis Services Thanks !
0
votes
1answer
132 views

SQL Server Audit Clutters Error log

I have a Server level Audit running and informational messages are continuously placed in the SQL Error log (every hour): Audit: Server Audit: 65976, Initialized and Assigned State: STARTED Audit: ...
1
vote
2answers
97 views

SQL Server Logon Auditing and Reporting the data from a DB Table

Is it possible to configure a SQL Server database to write audit information for logons (success and failure) to a database table that can be queried? The requirement is to be able to generate a ...
0
votes
1answer
66 views

Is “SQL Server Auditing” what I'm looking for?

Man... this feels like a broad question, so apologies in advance. The word "auditing" seems to have some depth in the DBA world, and I may not be asking the right question when I google. I'm trying ...
0
votes
0answers
47 views

How to use MariaDB server_audit plugin on MySQL

I need to log connections on MySQL on Windows. When I google it, I saw some advice to use MariaDB server_audit plugin on MySQL. (for example: here) So, I gave it a try, but I failed. I copied the ...
0
votes
0answers
20 views

SQL Server Audit catching SSIS metadata check

I'm wondering if what I'm experiencing is intended behavior or a bug with SQL Server Audits. I'm leaning towards bug. I set up an audit to monitor updates, inserts, & deletes to two tables. I ...
0
votes
1answer
41 views

query all audit entries defined with 'audit' command

what is the command to list all audit entries defined with audit command? Is there any command for it or maybe tableName to query from?
0
votes
0answers
21 views

No logs generate in audit.log file with audit plugin in MySQL in Linux?

No logs generate in audit.log file, even though: SELECT PLUGIN_NAME, PLUGIN_STATUS FROM INFORMATION_SCHEMA.PLUGINS WHERE PLUGIN_NAME LIKE 'audit%'; gives: | PLUGIN_NAME | PLUGIN_STATUS | +----------...
0
votes
1answer
88 views

Need help in leveraging MySQL auditing

We are setting up password rotation policy to rotate account/password quarterly. We are also planning to use MySQL/Maria/Percona Auditing. Need to figure out the most efficient and feasible way to ...
0
votes
1answer
32 views

Could you monitor all changes made within a postgresql database by somehow subscribing to the replication log?

I've been reading about postgresql replication and was wondering if it was somehow possible to listen to the replication binary log and push that to some tool like sumologic or splunk so that any ...
0
votes
0answers
61 views

Postgres Audit Table

Is it good practice to use a table in Postgres as an audit log for login events? The database has other tables like users, posts etc. If the backend receives a failed login, it would insert into the ...
2
votes
2answers
45 views

History table design for deletions in PG 11.5

I've got a question about the design of a history table in Postgres. The setup is that I've got a table that holds a needs list. A location recalculates in-demand items every five minutes, and pushes ...
1
vote
0answers
56 views

Oracle Still Auditing after NOAUDIT

We're redoing what is and isn't being auditing in a database my team has been put in charge of. Old audit settings were producing ~2M audit entries a day. Audit_trail parameter is set to DB. So we ...
0
votes
0answers
180 views

How can I import the fga_log$ table with impdp Oracle 12 R1

I am trying to import with impdp a save made as follows: expdp '"sys/mmm as sysdba"' full=y COMPRESSION=ALL DIRECTORY=LOGICS_EXPORTS COMPRESSION_ALGORITHM=BASIC LOGTIME=ALL CONTENT=ALL DUMPFILE=FULL-...
0
votes
1answer
128 views

Oracle 12c how to purge the FGA audit records before a certain date

please I need to know how to purge the FGA audit records before a certain date, I have an Oracle 12c R1 database in which the audit with FGA is implemented, the tables of this are in a tablespace ...
1
vote
1answer
44 views

Auditing all User activities

Today I had to grant sysadmin rights for 2 users. ;( As I couldn't change that, I at least want to see, what they are doing, so I am looking for a way, to audit all activities by these 2 Users. ...
2
votes
1answer
36 views

Get User for Audit Entries

I am trying to construct history entries for my application tables. (Basically a "who changed what and when" set of tables.) My problem is that I have a lot of users. Well over a thousand. My ...
1
vote
1answer
267 views

Managing AUD$ without DBMS_AUDIT_MGMT

I have a SYSTEM's table AUD$ where AUDIT records are stored. My AUDIT_TRAIL is set to DB,EXTENDED. I am on Oracle DB version 12c (12.2.0.1.0). With time (in 3 years) my AUD$ table grew to 500GB in ...
1
vote
0answers
41 views

Audit trail database design for multiple related tables [closed]

We have the database design requirement for audit trail purpose in MySQL 5.7. There is one main table and there are few sub-tables to the main table. For every record in the main table, there will ...
1
vote
0answers
15 views

SQL Server - Change AuditLevel on Linux hosted instance

just wondering if it's possible to change the AuditLevel on SQL Server 15.0.1800.32 (2019) hosted on Linux to "Failed logins only". Currently it's set to audit failed and successful logins and I ...
1
vote
1answer
86 views

Can Extended Events used instead of Auditing?

In BOL it is mentioned does this mean Extended Events can capture all the events that are traced by auditing? Can we get all the functionalities of auditing just by using XEvents? thanks
0
votes
0answers
22 views

Audit Trail Settings in SQL Server 2005

Where I can find the Audit Trail Settings in SQL Server 2005. Google search gives link to the topics like "how can we create audit tables", but I just need to know where I can see the current settings,...
0
votes
1answer
33 views

Why this system table doesn't appear on dictionary table?

How you can see I am the sys: SQL> show user; USER is "SYS" When I search the table in the dictionary the dictionary returns no rows: select table_name from dictionary where table_name like ...
0
votes
1answer
36 views

DB2 Audit Policy not producing EXECUTE data

I'm trying to set up an Audit facility on a DB2 AWSE V10.5 FP5 database running on Red Hat Linux Server 6.8. The definition for the policy is : ALTER AUDIT POLICY Failures CATEGORIES ...

1
2 3 4 5
7